All projects
Compliance SaaS

Rislix GRC (R-Trax)

Visit live

Rislix sells GRC services and needed a portal where each customer organisation tracks its own compliance. Rather than build from scratch, an existing GRC engine was adapted into a branded multi-tenant product.

Rislix GRC (R-Trax)

The problem

Fair TPRM had a solid compliance engine but was single-tenant, centred on vendor risk, and had no role model matching how Rislix's clients work.

What I built

  • Chose one database per organisation over a tenant column, with provisioning, migrate-all, and decommission scripts around a central registry.
  • Implemented the client's 7-role RBAC matrix across 40+ SQL migrations, splitting "read all" from "read assigned", with shell test suites for RBAC and security.
  • Wrote a native multi-arch Dockerfile and tuned the stack to run on a small AWS instance behind Nginx and Cloudflare.
  • Added a redesigned UI kit, a 3x3 risk register, an evidence review workflow, notifications, magic links, and a threat-intel feed module.

Impact

Live at rislix.com/trax, set up so each customer organisation can be onboarded independently.