Innova GRC is structurally based on a 3-pillar model with flexible configuration and integrates seamlessly into the compliance system:
The first pillar includes all functions of the organization that are significant to day-to-day operations and at the same time may be responsible for assessing, controlling, and mitigating risks and implementing effective controls.

The second pillar includes functions such as internal control, risk management and compliance, which facilitate and oversee the implementation of effective internal control and risk management practices by operational management.

The final and third pillar is internal audit, which provides independent assurance of effectiveness, internal control, and risk management, including first and second line of defense operations in the risk management system.

The early warning system makes it possible to act before an event occurs or a task is completed to avoid a rule violation and mitigate the impact. The application sends real-time email alerts to users informing them of assigned tasks and their due date, including a link with direct access to the task to consult. In this way, the risk managers do not have to constantly check the task and are perfectly informed by looking in their e-mail inbox.

Innova GRC's evidence management system allows the linking of all scanned documentation related to risks, controls and surveillance that are performed regularly, organized and permanently available to the users of the application.
Innova GRC includes an automated system for electronic signature of documents with a digital certificate and time stamp, which is used as proof of the business organization due diligence.