Long shot in the dark on this one but does anyone know of a freebie tool for GRC (similar to ZenGRC)? I'm working with a small company who has next to nothing for a budget at the moment but they're looking for some kind of solution to storing NIST 800-171, GDPR, and PCI DSS mapping and evidences. We're in spreadsheets right now but they don't love that idea. Not looking for anything with a "wow" factor, just an alternative to spreadsheets really. Thoughts? Recommendations?