ccpa
(14)
Integral Privacy Technologies
Integral is a privacy engineering company that turns sensitive real-world data - starting with HIPAA-regulated healthcare records - into compliant, AI-ready datasets. Founded in 2022 by Shubh Sinha and John Kuhn, it pairs automated de-identification and continuous risk assessment with embedded statisticians and privacy engineers (its Forward Deployed Privacy Services) so enterprises and AI labs can use regulated data quickly without violating privacy law. The company positions itself as an independent privacy layer for the real-world data economy and has raised roughly $24.9M to date, including an $18M Series A closed in July 2026.
LeadGenius
LeadGenius is a Berkeley-based B2B contact-data and buyer-intelligence company that blends machine learning with a globally distributed team of human researchers to build custom, compliance-first datasets for revenue teams. Rather than reselling a static database, it sources contact and account data on demand for each client, verifying every record before delivery, and layers in signals like role changes, technographics and buying-committee mapping. Spun out of the crowdsourcing startup MobileWorks in Y Combinator's 2011 class, the company pairs its data business with a social mission: it was the first crowdsourcing firm to tie worker pay to local living wages.
Chorology, Inc.
Chorology, Inc. is a San Jose-based data security and compliance startup that uses a Deep-AI 'knowledge encoding' engine - rather than conventional machine learning - to automatically discover, classify, and map an enterprise's sensitive data across structured and unstructured repositories. Its flagship platform, CAPE (Compliance and Posture Enforcer), aims to give organizations a continuous, mandate-agnostic view of where regulated data lives so they can enforce data security posture and meet frameworks like GDPR, CCPA, and HIPAA. Founded by serial cybersecurity entrepreneur Tarique Mustafa, the company emerged from stealth in July 2024 with $9M in funding and a roster of early Fortune 500 users.
DataGrail
DataGrail is a San Francisco-based data privacy company that helps modern brands automate compliance with regulations like GDPR, CCPA, and CPRA. Its Agentic Data Privacy Platform - powered by an AI privacy agent named Vera and backed by more than 2,500 pre-built integrations - handles the unglamorous plumbing of privacy: mapping where personal data lives, fulfilling data subject requests, managing consent, and running privacy and AI risk assessments. Founded in 2018 by three data and go-to-market veterans, it counts Salesforce, Databricks, Instacart, and Major League Soccer among its customers.
Lightbeam
Lightbeam is a San Jose-based data security and privacy company that converges DSPM, privacy operations, and AI governance into one identity-centric platform. Founded in 2020 by ex-Nutanix engineers, it uses AI to discover, classify, and map sensitive data across cloud, SaaS, and on-prem environments, tying each data fragment back to the human it belongs to. Customers in banking, healthcare, insurance, and tech use Lightbeam to automate compliance with GDPR, CCPA, HIPAA, and PCI while cutting data risk and controlling AI exposure through tools like Microsoft Copilot, ChatGPT Enterprise, and Google Gemini.
Osano
Osano is an Austin-based data privacy platform that helps companies comply with GDPR, CCPA, and 95+ global privacy laws through consent management, cookie banners, subject rights automation, data mapping, vendor risk monitoring, and privacy assessments. Founded in 2018, it is the first data privacy platform certified as a B Corporation and backs its software with an industry-only 'No Fines, No Penalties' guarantee. Osano processes over a billion consents a month for thousands of companies.
Jad Boutros
Jad Boutros is the co-founder and CEO of TerraTrue, a San Francisco privacy-and-security automation company he started in 2018 with former Snap general counsel Chris Handman. Before building software to make privacy reviews painless, Boutros spent nine years on Google's information security team leading security for its social products, then became Snap's first Chief Security Officer, where he and Handman ran thousands of privacy reviews a year out of a Google spreadsheet that ballooned past 100 tabs. TerraTrue is the product that spreadsheet should have been: a single source of truth that bakes privacy-by-design into the software development lifecycle.
Transcend
Transcend is the compliance layer for customer data. Founded by two Harvard students who couldn't get their own data back from the apps they used, the company builds privacy and AI-governance infrastructure that automates data mapping, data subject requests, consent management, and oversight of data flowing in and out of large language models. Its software powers modern data rights for more than 1.2 billion people across Fortune 100 brands and category leaders.
Ben Brook
Ben Brook is the co-founder and CEO of Transcend, the data-privacy infrastructure company he started in 2017 with Harvard classmate Mike Farrell. He flew to San Francisco the day after graduation to build software that lets the world's largest companies find, delete, and control personal data at machine speed. Under his lead Transcend has delivered actionable data rights to over a billion people and raised nearly $90M, including a $40M Series B in 2024. A Toronto-born, award-winning filmmaker turned privacy engineer, Brook argues that privacy only works when it is encoded directly into the systems that touch personal data.
Aayush Ghosh Choudhury
Aayush Ghosh Choudhury is the Co-Founder and CEO of Scrut Automation, a SaaS-based GRC platform that automates compliance and risk management for mid-market and enterprise companies. A former McKinsey consultant and IIT Ropar / ISB graduate, he co-built Scrut after experiencing firsthand how compliance bottlenecks stall enterprise sales - discovering the solution while trying to sell a different product entirely. Under his leadership, Scrut has grown to 800+ customers globally, raised $20.5M from Lightspeed, MassMutual Ventures, and Endiya Partners, earned a LinkedIn Top 20 Startup 2024 ranking, and been recognized by G2 as a fastest-growing and highest-satisfaction product in security compliance.
Balaji Ganesan
Balaji Ganesan is Co-Founder and CEO of Privacera (now Trust3 AI), the data security and AI governance platform built on top of Apache Ranger technology he co-created. A survivor of the Miracle on the Hudson, he co-founded XA Secure in 2013, which was acquired by Hortonworks and open-sourced as Apache Ranger — now deployed across thousands of enterprises globally. He launched Privacera in 2016 to extend that governance vision to multi-cloud environments, raised $67.3M in total funding, and counts Nike, Intuit, and Autodesk among his customers.
Privacera
Privacera (now operating as Trust3 AI by Privacera) is a Newark, California-based enterprise software company that runs a unified data and AI access governance platform. Built by the co-creators of Apache Ranger, it gives Fortune 500 teams a single place to discover sensitive data, set policies, and enforce access across Snowflake, Databricks, AWS, Azure, GCP, and the new generation of LLM-powered apps.
Scrut Automation
Scrut Automation is a security-first GRC (governance, risk, and compliance) platform that helps cloud-native companies automate evidence collection, manage risk, and stay continuously audit-ready across 60+ frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.
Mark Godley
Mark Godley is the CEO of LeadGenius, a Berkeley-based B2B data intelligence platform that combines AI with human computation to deliver precision contact data for enterprise go-to-market teams. A self-described C-suite startup junkie with 30 years of SaaS expertise, Godley joined LeadGenius in 2017 — first as President, then stepping into the CEO role — and has driven the company's pivot from a service-heavy model to a scalable SaaS platform serving 400+ enterprise customers across 42 countries including Google, Microsoft, Amazon, IBM, and Autodesk. Under his leadership, LeadGenius has distinguished itself as the first crowdsourcing company to set a minimum wage tied to the cost of living in each country of operation, building a global decentralized workforce of data researchers while remaining GDPR and CCPA compliant.