audit-automation
(6)
Thoropass
Thoropass is a New York-based compliance and audit company that pairs compliance-automation software with an in-house, tech-enabled CPA and security audit firm. Founded in 2019 as Laika and rebranded in 2023, it lets companies get and stay certified across 30+ frameworks - SOC 2, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR, and ISO 42001 for AI - through a single platform where the auditor is assigned on day one. By reusing evidence across frameworks and layering AI features like First Pass AI and Smart Sort AI on top of continuous control monitoring, Thoropass helps growing businesses complete audits meaningfully faster than the traditional consultant-plus-auditor route.
Trustero
Trustero is a Palo Alto AI company building software for security and compliance teams. Founded in 2020 by SignalFx co-founder Phillip Liu, it applies generative AI and a patent-pending 'Trust Graph' to automate the grind of governance, risk and compliance (GRC): gap analysis, evidence collection, control testing, security questionnaires, third-party risk reviews and audit prep across frameworks like SOC 2, ISO 27001, FedRAMP, PCI, SOX and DORA. In November 2024 it raised a $10.35M Series A led by Bright Pixel Capital.
Zania
Zania builds autonomous AI agents for governance, risk, and compliance (GRC). Founded in 2023 by former CISO Shruti Gupta, the Palo Alto company deploys domain-specific 'AI teammates' that run third-party risk reviews, controls testing, evidence collection, security questionnaires, and continuous compliance across frameworks like SOC 2, ISO 27001, and HIPAA - work it claims runs up to 30x faster at 90% lower cost with 94%+ accuracy. It raised an $18M Series A led by NEA in 2025.
Delve
Delve is a San Francisco AI startup that automates regulatory compliance. Its AI agents collect evidence, scan code and infrastructure, autofill security questionnaires, and prepare audits for frameworks like SOC 2, HIPAA, GDPR, ISO 27001, PCI-DSS, and FedRAMP - turning a process that traditionally takes months into days. Founded in 2023 by MIT students Karun Kaushik and Selin Kocalar, the company raised a $32M Series A led by Insight Partners in 2025 at a reported $300M valuation, and says it serves more than 1,500 fast-growing companies.
Scrut Automation
Scrut Automation is a security-first GRC (governance, risk, and compliance) platform that helps cloud-native companies automate evidence collection, manage risk, and stay continuously audit-ready across 60+ frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.
Vanta
Vanta is the trust management platform that automates security and compliance for more than 16,000 companies - turning SOC 2, ISO 27001, HIPAA, GDPR and dozens of other frameworks from a months-long PDF marathon into something a startup can pass before lunch.