ccpa
(9)
Integral Privacy Technologies
Integral is a privacy engineering company that turns sensitive real-world data - starting with HIPAA-regulated healthcare records - into compliant, AI-ready datasets. Founded in 2022 by Shubh Sinha and John Kuhn, it pairs automated de-identification and continuous risk assessment with embedded statisticians and privacy engineers (its Forward Deployed Privacy Services) so enterprises and AI labs can use regulated data quickly without violating privacy law. The company positions itself as an independent privacy layer for the real-world data economy and has raised roughly $24.9M to date, including an $18M Series A closed in July 2026.
LeadGenius
LeadGenius is a Berkeley-based B2B contact-data and buyer-intelligence company that blends machine learning with a globally distributed team of human researchers to build custom, compliance-first datasets for revenue teams. Rather than reselling a static database, it sources contact and account data on demand for each client, verifying every record before delivery, and layers in signals like role changes, technographics and buying-committee mapping. Spun out of the crowdsourcing startup MobileWorks in Y Combinator's 2011 class, the company pairs its data business with a social mission: it was the first crowdsourcing firm to tie worker pay to local living wages.
Chorology, Inc.
Chorology, Inc. is a San Jose-based data security and compliance startup that uses a Deep-AI 'knowledge encoding' engine - rather than conventional machine learning - to automatically discover, classify, and map an enterprise's sensitive data across structured and unstructured repositories. Its flagship platform, CAPE (Compliance and Posture Enforcer), aims to give organizations a continuous, mandate-agnostic view of where regulated data lives so they can enforce data security posture and meet frameworks like GDPR, CCPA, and HIPAA. Founded by serial cybersecurity entrepreneur Tarique Mustafa, the company emerged from stealth in July 2024 with $9M in funding and a roster of early Fortune 500 users.
DataGrail
DataGrail is a San Francisco-based data privacy company that helps modern brands automate compliance with regulations like GDPR, CCPA, and CPRA. Its Agentic Data Privacy Platform - powered by an AI privacy agent named Vera and backed by more than 2,500 pre-built integrations - handles the unglamorous plumbing of privacy: mapping where personal data lives, fulfilling data subject requests, managing consent, and running privacy and AI risk assessments. Founded in 2018 by three data and go-to-market veterans, it counts Salesforce, Databricks, Instacart, and Major League Soccer among its customers.
Lightbeam
Lightbeam is a San Jose-based data security and privacy company that converges DSPM, privacy operations, and AI governance into one identity-centric platform. Founded in 2020 by ex-Nutanix engineers, it uses AI to discover, classify, and map sensitive data across cloud, SaaS, and on-prem environments, tying each data fragment back to the human it belongs to. Customers in banking, healthcare, insurance, and tech use Lightbeam to automate compliance with GDPR, CCPA, HIPAA, and PCI while cutting data risk and controlling AI exposure through tools like Microsoft Copilot, ChatGPT Enterprise, and Google Gemini.
Osano
Osano is an Austin-based data privacy platform that helps companies comply with GDPR, CCPA, and 95+ global privacy laws through consent management, cookie banners, subject rights automation, data mapping, vendor risk monitoring, and privacy assessments. Founded in 2018, it is the first data privacy platform certified as a B Corporation and backs its software with an industry-only 'No Fines, No Penalties' guarantee. Osano processes over a billion consents a month for thousands of companies.
Transcend
Transcend is the compliance layer for customer data. Founded by two Harvard students who couldn't get their own data back from the apps they used, the company builds privacy and AI-governance infrastructure that automates data mapping, data subject requests, consent management, and oversight of data flowing in and out of large language models. Its software powers modern data rights for more than 1.2 billion people across Fortune 100 brands and category leaders.
Privacera
Privacera (now operating as Trust3 AI by Privacera) is a Newark, California-based enterprise software company that runs a unified data and AI access governance platform. Built by the co-creators of Apache Ranger, it gives Fortune 500 teams a single place to discover sensitive data, set policies, and enforce access across Snowflake, Databricks, AWS, Azure, GCP, and the new generation of LLM-powered apps.
Scrut Automation
Scrut Automation is a security-first GRC (governance, risk, and compliance) platform that helps cloud-native companies automate evidence collection, manage risk, and stay continuously audit-ready across 60+ frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.