data-privacy
(45)
MetaCompliance wants to change what happens after you click
Security training is easy to count. Safer habits are harder. MetaCompliance is building a business around that gap, combining phishing rehearsals, policy paperwork and lessons triggered by real-world exposure.
aosphere sells the legal answer, minus the timesheet
A business born inside Allen & Overy turned recurring legal questions into an annual subscription. Now aosphere is buying the tools to carry those answers into the daily decisions of banks and asset managers.
GRC Solutions wrote the rulebook. Now it does the work.
A business that began with security books now sells the people, software and testing behind compliance. Its next bet puts round-the-clock cyber response on the same shopping list.
Collibra Wants to Be the Air-Traffic Control for Your Company's AI
The Belgian data-governance pioneer spent 18 years teaching companies what their data means. Now it is betting that AI agents need the same lesson - plus a control tower.
BigID Found the Enterprise’s Dark Data. Now It Wants to Govern What AI Does With It
BigID built a unicorn by answering a dull but dangerous question: what data does a company actually have? Ten years in, AI has made that inventory more valuable - and the company’s own reinvention more severe.
Ketch Wants to Turn the Cookie Banner Into a Kill Switch
Most privacy software records what a customer clicked. Ketch is betting that the valuable part is making the rest of the company obey it.
The Doctor Who Built a Research Machine Because He Never Had Time to Do Research
Dr Matt Wilson spent 14-hour shifts in emergency medicine with no time to eat, let alone run a study. So he built a platform that makes the research happen without the clinician lifting a finger - and pharma is paying to plug in.
How Do You Work the Dark Web Without Getting Burned? Build a Throwaway Computer Every Single Time.
Grey Market Labs spent a decade turning intelligence tradecraft into a button. Now Fortune 100 banks and the US Army rent disposable, fully isolated workspaces that appear in minutes and leave no trail.
The 140-Lawyer Firm Built to Make Bigger Rivals Blink
Keker, Van Nest & Peters has one office, no practice departments and a habit of preparing every hard case as if a jury will decide it. In an era of sprawling law-firm empires, constraint is its competitive strategy.
Rocket.Chat
Bring together messaging, voice, video, critical apps, and AI to keep teams connected and missions protected.
NuMind
NuMind is a Paris-based, Y Combinator-backed AI company building multimodal large language models that turn messy documents - PDFs, scans, spreadsheets, handwritten forms - into clean, structured JSON. Its NuExtract platform and open-source models let developers and enterprises extract exactly the fields they define, in any language, either as a hosted API or deployed privately on their own infrastructure.
Pally
Pally is an AI relationship management platform that pulls together a person's connections from across iMessage, WhatsApp, LinkedIn, Google, email, calendar and X into one intelligent inbox and personal CRM. Its AI researches what each contact does and posts online, surfaces who you should reconnect with, prepares you for meetings, and tracks relationship strength - built for founders, investors, salespeople and recruiters who live and die by their networks. Founded in 2024 by Haz Hubble and Wyatt Lansford, Pally is part of Y Combinator's Summer 2025 batch.
Cape.ai
Cape.ai (formerly Cape Privacy) is a New York-based enterprise AI company building an agentic automation platform purpose-built for financial services. Founded in 2018 by Che Wijesinghe and Gavin Uhma, Cape lets banks, asset managers and insurers automate document-heavy back-office work - enhanced due diligence, SOC-report and third-party risk analysis, KYC/AML onboarding and regulatory reporting - using AI agents that are fully cited, auditable and deployable on-premise or in a private cloud so sensitive data never leaves the customer's environment.
Integral Privacy Technologies
Integral is a privacy engineering company that turns sensitive real-world data - starting with HIPAA-regulated healthcare records - into compliant, AI-ready datasets. Founded in 2022 by Shubh Sinha and John Kuhn, it pairs automated de-identification and continuous risk assessment with embedded statisticians and privacy engineers (its Forward Deployed Privacy Services) so enterprises and AI labs can use regulated data quickly without violating privacy law. The company positions itself as an independent privacy layer for the real-world data economy and has raised roughly $24.9M to date, including an $18M Series A closed in July 2026.
MDClone
MDClone is a healthcare data company that lets clinicians, researchers, and analysts explore patient data without touching real patient records. Its ADAMS platform ingests structured and unstructured health-system data into a longitudinal database, then generates statistically faithful synthetic data that carries no risk to patient privacy. That combination turns months-long, IRB-heavy data requests into self-service exploration, letting front-line staff ask their own questions, run analyses, and share results across organizations. Founded in Israel in 2016 and used across the U.S., Canada, and 100% of the Israeli healthcare market, MDClone has raised roughly $112M to expand data-driven discovery in health systems, government, payers, and life sciences.
Omnisient - Collaborative Consumer Intelligence
Omnisient is a privacy-preserving data collaboration company that lets banks, insurers, retailers and consumer brands analyze their first-party data together without ever sharing or exposing it. Using privacy enhancing technologies, US-patented Crypto-IDs and AI-powered data clean rooms, the platform matches mutual customers across datasets so lenders can score credit-invisible and thin-file consumers using alternative behavioral data - all while personal information never leaves the owner's environment. Founded in Cape Town and now expanding into the United States, the company protects hundreds of millions of consumer records for more than 100 enterprises.
Protege
Protege is a New York-based AI data platform that connects owners of private, real-world data - hospitals, media libraries, motion-capture studios and more - with the AI labs and enterprises that need it to train, fine-tune and evaluate models. It licenses and curates proprietary datasets under strict privacy, IP and compliance controls, so data holders get paid and provenance is preserved. Founded in 2024 by Bobby Samuels and Travis May, Protege has assembled access to billions of clinical notes, hundreds of millions of medical images, and hundreds of thousands of hours of video and audio, positioning itself as core infrastructure for the post-web era of AI development.
Synthesized
Synthesized is a London- and New York-based enterprise software company that automates the creation of production-realistic test data. Its AI-driven platform generates, masks, and subsets data from sensitive systems so teams can validate software, database migrations, and AI agents before they reach production - all while preserving privacy and meeting regulations such as GDPR. Founded in 2020 by Cambridge machine-learning PhD Nicolai Baldin, the company counts Deutsche Bank and UBS among its customers and raised a $20M Series A in September 2025.
webAI
webAI is an Austin-based sovereign AI company that lets enterprises build, train, and run custom AI models on their own local hardware instead of the cloud. Founded in 2019 by David Stout, Ethan Baird, and Tyler Mauer, its end-to-end platform - spanning the Navigator development environment, the Companion assistant, and webFrame clustering software for Apple silicon - keeps sensitive data on-device while delivering cloud-grade intelligence. The company reached a reported $2.5 billion valuation in early 2026 and serves customers across healthcare, retail, logistics, and aviation.
K2view
K2view is an enterprise data company founded in 2009 and headquartered in Yokneam, Israel, with US operations in Texas. Its patented Data Product Platform is built on a proprietary micro-database technology that organizes fragmented enterprise data by business entity - a customer, order, product or loan - so each entity's data lives in its own encrypted, real-time, individually managed database. The approach powers data integration, test data management, data masking, synthetic data generation and, increasingly, AI-ready data pipelines that ground large language models and AI agents. K2view serves large enterprises in telecom, banking, healthcare, insurance and retail, including AT&T, Verizon, Vodafone and BBVA, and has raised roughly $43 million in funding.
LeadGenius
LeadGenius is a Berkeley-based B2B contact-data and buyer-intelligence company that blends machine learning with a globally distributed team of human researchers to build custom, compliance-first datasets for revenue teams. Rather than reselling a static database, it sources contact and account data on demand for each client, verifying every record before delivery, and layers in signals like role changes, technographics and buying-committee mapping. Spun out of the crowdsourcing startup MobileWorks in Y Combinator's 2011 class, the company pairs its data business with a social mission: it was the first crowdsourcing firm to tie worker pay to local living wages.
Baffle, Inc.
Baffle, Inc. is a Santa Clara data security company that builds a no-code data protection platform - combining encryption, tokenization and masking - so enterprises can protect sensitive data across databases, cloud data warehouses and GenAI pipelines without rewriting application code.
Chorology, Inc.
Chorology, Inc. is a San Jose-based data security and compliance startup that uses a Deep-AI 'knowledge encoding' engine - rather than conventional machine learning - to automatically discover, classify, and map an enterprise's sensitive data across structured and unstructured repositories. Its flagship platform, CAPE (Compliance and Posture Enforcer), aims to give organizations a continuous, mandate-agnostic view of where regulated data lives so they can enforce data security posture and meet frameworks like GDPR, CCPA, and HIPAA. Founded by serial cybersecurity entrepreneur Tarique Mustafa, the company emerged from stealth in July 2024 with $9M in funding and a roster of early Fortune 500 users.
DataGrail
DataGrail is a San Francisco-based data privacy company that helps modern brands automate compliance with regulations like GDPR, CCPA, and CPRA. Its Agentic Data Privacy Platform - powered by an AI privacy agent named Vera and backed by more than 2,500 pre-built integrations - handles the unglamorous plumbing of privacy: mapping where personal data lives, fulfilling data subject requests, managing consent, and running privacy and AI risk assessments. Founded in 2018 by three data and go-to-market veterans, it counts Salesforce, Databricks, Instacart, and Major League Soccer among its customers.
DrumWave Inc.
DrumWave Inc. is a Mountain View, California technology company building the financial rails for a new data economy - one where personal and corporate data is treated as an owned, savable, tradable asset. Its flagship dWallet platform and Data Savings Account let individuals and companies store certified data, exchange it with consent, and earn income from it, much like a bank account for the information people generate every day. Founded in 2015 and led by Brazilian-American entrepreneur Andre Vellozo, DrumWave gained attention for launching its Data Savings Account at Money20/20 USA in 2024 and for partnering with Brazil's state tech firm Dataprev on what is billed as the world's first national data monetization program.
Essert Inc.
Essert Inc. is a Silicon Valley software company that builds a Declarative AI platform to automate cybersecurity, privacy, and AI-governance compliance for enterprises. Founded in 2022 by a team of serial entrepreneurs, Essert helps publicly traded companies and regulated organizations navigate frameworks like the SEC Cybersecurity Disclosure Rules, CCPA/CPRA, and emerging AI regulation - auto-generating policies, running materiality and risk assessments, monitoring controls, and producing audit-ready disclosure reports.
Lightbeam
Lightbeam is a San Jose-based data security and privacy company that converges DSPM, privacy operations, and AI governance into one identity-centric platform. Founded in 2020 by ex-Nutanix engineers, it uses AI to discover, classify, and map sensitive data across cloud, SaaS, and on-prem environments, tying each data fragment back to the human it belongs to. Customers in banking, healthcare, insurance, and tech use Lightbeam to automate compliance with GDPR, CCPA, HIPAA, and PCI while cutting data risk and controlling AI exposure through tools like Microsoft Copilot, ChatGPT Enterprise, and Google Gemini.
Osano
Osano is an Austin-based data privacy platform that helps companies comply with GDPR, CCPA, and 95+ global privacy laws through consent management, cookie banners, subject rights automation, data mapping, vendor risk monitoring, and privacy assessments. Founded in 2018, it is the first data privacy platform certified as a B Corporation and backs its software with an industry-only 'No Fines, No Penalties' guarantee. Osano processes over a billion consents a month for thousands of companies.
Tonic.ai
Tonic.ai builds synthetic data infrastructure that lets engineering and AI teams work with realistic, privacy-safe stand-ins for production data. Its platform de-identifies, masks, subsets, and synthesizes both structured databases and unstructured text so developers can test software, train models, and feed LLM and RAG pipelines without exposing sensitive information. Founded in 2018 by a team out of Palantir and Tableau, the San Francisco company serves enterprises across finance, healthcare, and technology and has raised roughly $56M in venture funding.
Cake
Cake is a New York-based startup that bundles the sprawling open-source AI stack into a single managed platform, so companies - especially in regulated industries like finance, insurance and healthcare - can deploy AI inside their own cloud without wiring together 100+ tools by hand. Founded in 2022 by Misha Herscu and Skyler Thomas and launched from stealth in December 2024 with a $13M seed led by Google's Gradient Ventures, Cake handles the integration, security, governance and cost-monitoring glue around open-source components like LangChain, Ray, MLflow and vector databases, all deployed inside a customer's own VPC so data never leaves.