AboutWhat's newContact & demo
Risk ManagementAvailable now

Answer the question behind the question.

When leadership or an auditor asks something no dashboard shows, build the query yourself across risks, controls, vendors, assets, privacy and more, or just type it in plain English.

Illustration with sample data

Overview

What Query Builder & Custom Reports does

Query Builder covers about 30 entities across risk, controls, compliance, third parties, privacy, firewall, assets, security exceptions and users. Build visually, write RVQL, or type a plain-English sentence that becomes a query for you to review. It never runs anything by itself. Use nested conditions, relative date periods, runtime parameters, summaries with up to 3 group-bys, Top or Bottom N and formulas.

Results are always limited to what the person running the query can see, including field-level security. Sharing a query shares the question, not the answer. The Query Catalog keeps versions and shows which widgets depend on each query. Queries can be scheduled, raise alerts and feed about 20 visualisation types used across dashboards.

Laptop showing business analytics
Capabilities

Key capabilities

01

About 30 entities

Risk, controls, compliance, TPRM, privacy, firewall, assets, exceptions, users and your Focus items.

02

Three ways to build

Visual builder, RVQL text, or plain English that becomes a query you review.

03

Summaries & formulas

Up to 3 group-bys, 7 measure types, thresholds, Top/Bottom N, percentages and ratios.

04

Viewer's own access

Organisation scope, relationship visibility and field-level security on every run.

05

Catalog, schedules & alerts

Versions, Used By, publishing, scheduled runs and threshold alerts.

06

Export

CSV and Excel export, governed by its own permission.

Benefits

The business case.

Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Query Builder & Custom Reports changes for your programme.

Potential savings
Minutes, not days

Ad-hoc reporting

Self-service queries replace custom report requests.

Visibility & decision-making
Precise answers

For auditors and boards

Exact record lists back up every number you present.

Reduced complexity
No BI stack

Reporting built in

No separate reporting infrastructure or data copies for GRC data.

Achieving compliance
Safe by design

No data leakage

A shared query never reveals records the viewer can't open.

Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.

How it works

From setup to outcome.

Ask

Build visually, write RVQL or type in plain English.

Refine

Add conditions, parameters, summaries and formulas.

Visualise

Turn results into charts and widgets.

Share and schedule

Publish, schedule, alert or export.

Framework alignment

Supports your obligations.

Query Builder & Custom Reports contributes evidence and coverage to these frameworks and regulations.

ISO/IEC 27001:2022 (9.1)SOC 2 (CC4.1)NIST CSF 2.0 (GV.OV)

All supported frameworks

FAQ

Common questions.

Do I need SQL?

No. Users never write SQL. Use the visual builder, RVQL or plain English, which becomes a query you review before it runs.

Can a shared query expose data?

No. Every run uses the runner's own access, so recipients see only the records they are allowed to see.

Which records can I query?

About 30 entities across risk, compliance, controls, third parties, privacy, firewall, assets, security exceptions and users.

See Query Builder & Custom Reports in action.

Book a 30-minute walkthrough tailored to your frameworks, vendors and team.