SureCloud Ltd. has launched a groundbreaking AI agent team for Governance, Risk, and Compliance (GRC) operations, introducing Gracie as the first cross-domain agentic capability in the industry. This innovation convenes AI experts across risk, compliance, audit, and third-party domains to work on a single task.
Addressing Compliance Fatigue
SureCloud, with two decades of experience as a leading GRC solutions provider trusted by global banks and major UK retailers, has identified a critical capacity problem. According to SureCloud research, 49% of UK enterprises struggle to keep up with five or more major regulations simultaneously, and 57% say budget constraints limit hiring needed to close compliance gaps. The new AI agents are designed to alleviate this burden by automating manual tasks.
Introducing Gracie: A Virtual GRC Team
Gracie represents a major enhancement to SureCloud's GRC platform, moving beyond simple conversational capabilities to true autonomous agents capable of executing over 200 distinct actions within the platform. These persona-based AI agents fill specialist positions across a GRC programme, executing tasks according to an organisation's own expertise and operating within a governed architecture purpose-built for regulated functions.
SureCloud ships Personas for every role, from Risk SMEs to Privacy SMEs. Customers can invoke this virtual team for reasoning on specific tasks and define how each agent operates within their policies and governance structures. Skills then codify how specific GRC activities are performed, taking the best expertise from SureCloud or the customer's own business, ensuring repeatable consistency.
Nick Rafferty, CEO of SureCloud, commented: "For two decades, GRC has been a discipline of skilled people doing manual work. The expertise was always there. The execution capacity never was. Gracie changes that equation by giving every person an agent counterpart that carries their workload, operates to their standard, and frees them to do the work only a senior expert can do. This is the moment GRC stops being a record-keeping exercise and starts being an executable one."
SureCloud was recognised this month in three categories of the Gartner Hype Cycle for Cyber-Risk Management, 2026, and Gartner's new Innovation Insight: Cyber GRC.
