Apollo capabilities
One Platform, Packaged Around the Work You Need
Compare Apollo bundles, see the capabilities included in each one and understand the platform capabilities shared across the whole system.
5
Bundles
41
Capabilities
1
Platform
Capability matrix
See What Comes with Every Bundle
The coloured band shows the common Apollo platform foundation. The matrix below shows where each capability is included, with links to every bundle and capability overview.
Open a bundle to compare its included capabilities. Shared platform capabilities below are included in every bundle.
Organisational GRC
Connect school-wide risk, compliance, policy, staff submissions and credential work in one practical governance system.
- Risk Register
- Control Register
- Asset Register
- Supplier Register
- Incident Register
- Frameworks
- Compliance Projects
- Policy Library
- Policy Authoring
- Policy Review and Approval
- Policy Publishing and Versions
- Policy Acknowledgements
- Document Reviews
- Forms
- Workflows
- Credential Library
- Credential Requirements
- Credential Records
Cyber GRC
A practical operating system for cybersecurity teams that need to manage risks, obligations, policies and improvement work in one connected place.
- Risk Register
- Control Register
- Asset Register
- Supplier Register
- Incident Register
- Frameworks
- Compliance Projects
- Policy Library
- Policy Authoring
- Policy Review and Approval
- Policy Publishing and Versions
- Policy Acknowledgements
- Document Reviews
School Supplier Hub
Run supplier assessments automatically and use AI to keep supplier details and assessments up to date. Add your school's context to prioritise third-party risk.
Explore School Supplier HubHuman Risk Management
Help staff recognise current threats, practise safer behaviour and reduce people-related security risk.
- Awareness Training
- Phishing Campaigns
- Compromise Monitoring
- Compromise Remediation
- Policy Acknowledgements
Trust Management
Respond to customer assurance work, publish approved information and identify web weaknesses from one connected bundle.
- Questionnaire Automation
- Questionnaire Knowledgebase
- Security Q&A Chat
- Trust Centre Publishing
- Artefact Library
- Subprocessor Directory
- Trust Centre Assistant
- Site Scanning
- Scan Findings
Connect school-wide risk, compliance, policy, staff submissions and credential work in one practical governance system.
A practical operating system for cybersecurity teams that need to manage risks, obligations, policies and improvement work in one connected place.
Run supplier assessments automatically and use AI to keep supplier details and assessments up to date. Add your school's context to prioritise third-party risk.
Help staff recognise current threats, practise safer behaviour and reduce people-related security risk.
Respond to customer assurance work, publish approved information and identify web weaknesses from one connected bundle.
| Capability | Organisational GRC | Cyber GRC | School Supplier Hub | Human Risk Management | Trust Management |
|---|---|---|---|---|---|
| Risk Register | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Control Register | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Asset Register | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Supplier Register | Not included in Human Risk Management | Not included in Trust Management | |||
| Incident Register | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Frameworks | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Compliance Projects | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Policy Library | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Policy Authoring | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Policy Review and Approval | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Policy Publishing and Versions | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Policy Acknowledgements | Not included in School Supplier Hub | Not included in Trust Management | |||
| Document Reviews | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | ||
| Forms | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | |
| Workflows | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | |
| Credential Library | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | |
| Credential Requirements | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | |
| Credential Records | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | Not included in Trust Management | |
| Supplier Library | Not included in Organisational GRC | Not included in Cyber GRC | Not included in Human Risk Management | Not included in Trust Management | |
| Supplier Assessments | Not included in Organisational GRC | Not included in Cyber GRC | Not included in Human Risk Management | Not included in Trust Management | |
| Live Document Reviews | Not included in Organisational GRC | Not included in Cyber GRC | Not included in Human Risk Management | Not included in Trust Management | |
| Awareness Training | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Trust Management | |
| Phishing Campaigns | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Trust Management | |
| Compromise Monitoring | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Trust Management | |
| Compromise Remediation | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Trust Management | |
| Questionnaire Automation | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Questionnaire Knowledgebase | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Security Q&A Chat | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Trust Centre Publishing | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Artefact Library | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Subprocessor Directory | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Trust Centre Assistant | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Site Scanning | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management | |
| Scan Findings | Not included in Organisational GRC | Not included in Cyber GRC | Not included in School Supplier Hub | Not included in Human Risk Management |
Apollo platform
Shared across every bundle
These platform capabilities are included whichever bundle you choose.
Single Sign-On
Sign in to Apollo with your existing Microsoft or Google work account, so your team can use a familiar identity instead of another separate sign-in.
Connected Records
Connect risks, obligations, controls, assets, suppliers, policies and work without rebuilding the same context.
Ownership & Activity
Keep owners, comments, decisions, due dates and progress visible alongside the work.
Evidence & History
Retain supporting evidence and the history behind reviews, decisions and changes.
Dashboards & Reporting
Turn current records into clear progress views for teams, executives and boards.
Role-Based Access
Control who can view, contribute to and manage sensitive information across Apollo.
Task Management
Assign, prioritise and track responsibilities across all aspects of your GRC program.
Swipe horizontally to compare all five bundles.
Platform
The shared foundation
Common services connect information, evidence, access and reporting across Apollo.
Bundle
What you purchase
Each bundle packages the capabilities needed for a coherent area of work.
Capability
What your team uses
Capabilities are the functional building blocks that can appear in one or more bundles.
Questions and answers
Questions about capabilities and bundles
Practical answers to common questions about managing this responsibility well.
What is an Apollo capability?
A capability is a reusable functional building block in the Apollo platform, such as a risk register, forms or policy authoring. Capabilities are packaged into products and may support more than one bundle or solution.
Why do some capabilities appear in several bundles?
The same underlying workflow can support different customer responsibilities. Apollo reuses the canonical capability rather than creating duplicate tools for cyber, organisational or industry contexts.
What are shared platform capabilities?
Shared platform capabilities provide foundations such as connected records, ownership, evidence, activity and reporting across Apollo bundles.
How do products differ from capabilities?
Products are coherent customer-facing areas of Apollo. Each product combines the capabilities needed to complete that area of work.
How should we use the capability matrix?
Use the matrix to see which specialist capabilities are included in each bundle, then open an individual capability page for its workflow, detailed features and related products.
Not Sure Which Bundle Fits?
Tell us what your team needs to manage and we’ll show you the most relevant capabilities and purchase path.