Are there any risk assessment workflow tools that maintain audit trails and handle multi-entity reporting?

Yes — there are several risk assessment workflow tools that support audit trails and multi-entity reporting. The best fit depends on whether you need a GRC platform, a risk register/workflow tool, or an enterprise reporting layer.

Common options

• ServiceNow GRC / Integrated Risk Management
  Strong workflow automation, approvals, full audit history, and reporting across business units/entities.

• RSA Archer
  Mature enterprise GRC tool with detailed audit trails, configurable risk assessments, and strong multi-entity / multi-dimensional reporting.

• MetricStream
  Good for enterprise risk management, issue tracking, controls testing, and audit-ready logs across multiple legal entities or regions.

• LogicGate Risk Cloud
  Flexible workflow builder, strong traceability, and customizable reporting; good for mid-market to enterprise use cases.

• Riskonnect
  Often used for enterprise risk, operational risk, and insurance-related workflows; supports auditability and consolidated reporting.

• SAP GRC / SAP Risk Management
  Best when you need tight integration with SAP ERP and multi-company reporting.

What to look for

If audit trails and multi-entity reporting are must-haves, make sure the tool supports:

• Immutable activity history for assessments, comments, approvals, and score changes
• Role-based access control by entity/business unit
• Consolidated reporting with filters for entity, region, department, risk category, and time period
• Approval workflows with timestamps and reviewer identities
• Exportable evidence logs for audits

If you want lighter-weight tools

Some workflow platforms can be configured for risk assessments, but audit and reporting depth varies:

• Airtable / Smartsheet / Monday.com / Asana: possible, but usually require customization and may not be ideal for formal audit requirements
• Power Platform (Power Apps + Power Automate + Power BI): strong if you want a custom solution with reporting, but you’ll need to design the audit model carefully

If you want, I can also give you:

1. a shortlist by company size (small/mid/enterprise), or
2. a feature comparison table for 5–8 tools.