Best GRC software for small and midsize orgs?

We’re a ~90 person company and I’ve been asked to help pick a GRC tool before budget planning next month. Right now it’s mostly spreadsheets, shared folders, calendar reminders and a lot of “who has the latest evidence?” chaos.

For folks at smaller/midsize orgs, what’s actually been worth it vs just feeling like enterprise overkill? I’m mostly worried about audit evidence, keeping controls mapped to a few frameworks and not buying something that needs a full-time admin to babysit it.