
He and Chris Pantaenius started with about 25 ideas, chose contract management, then discovered that customers wanted to work differently. Onspring grew out of their willingness to let the plan change.
A factory can make a perfect part and still lose the paperwork that proves it. SoftExpert built a business connecting the work, the records and the people who must sign off.
A health plan can resolve a complaint and still struggle to prove it did the right thing. Inovaare connects the case, the rule and the evidence - then offers to run the operation, too.

Across Microsoft, ClearSlide, Paylocity and Diligent, Meera Mehta kept returning to the same demanding assignment: make sophisticated software intelligible to the people expected to buy it, use it and trust it.
The company began as a private-equity roll-up of four compliance specialists. Fourteen years later, its real advantage is not the hotline - it is the data trail that begins when someone decides to speak up.
The 39-year-old legal-tech veteran stitched together matter management, risk, HR compliance and workflow automation. The bet is that regulated teams want one governed system more than another clever point solution.
The board portal pioneer survived an accounting-control stumble, a $624 million take-private and a decade of acquisitions. Its next trick is turning every risk signal into something a director can use before the meeting starts.
LRN spent three decades turning the corporate training everyone dreads into a source of behavioral data. Its best proof is not a lofty ethics slogan - it is 19,000 hours returned to one client's workforce.
Most companies still manage danger in spreadsheets and departmental silos. Riskonnect built a sprawling enterprise platform to connect the clues - and one commissioned study shows both the appeal and the price of the bet.

After two decades inside governance software, the 4CRisk founder turned compliance into a connection problem. An $8 million round and a 2026 acquisition by CUBE followed.
Meiran Galis spent years at EY watching startups treat security audits like a fire drill. Scytale is his bet that compliance can run in the background instead of eating a quarter.
Shruti Gupta is the founder and CEO of Zania, a Palo Alto startup building agentic AI 'teammates' that execute governance, risk, and compliance work end to end. Before founding Zania in 2023, she spent years inside security teams at Microsoft Identity, Airbnb, Instacart, and Brex, moving from founding security engineer to CISO. In September 2025 Zania raised an $18 million Series A led by NEA, backed by the Anthology Fund (Menlo Ventures and Anthropic) and a syndicate of operators from Amazon, Airbnb, PayPal, and PwC. Her pitch is simple: stop shipping compliance tools that organize work, and start shipping AI that does the work.
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
Trustero is a Palo Alto AI company building software for security and compliance teams. Founded in 2020 by SignalFx co-founder Phillip Liu, it applies generative AI and a patent-pending 'Trust Graph' to automate the grind of governance, risk and compliance (GRC): gap analysis, evidence collection, control testing, security questionnaires, third-party risk reviews and audit prep across frameworks like SOC 2, ISO 27001, FedRAMP, PCI, SOX and DORA. In November 2024 it raised a $10.35M Series A led by Bright Pixel Capital.
VComply is a cloud-based governance, risk, and compliance (GRC) platform that helps mid-market organizations turn compliance from scattered spreadsheets and missed deadlines into a single system of record. Founded in 2019 by Harshvardhan Kariwala after a costly missed filing at a prior business, the Sunnyvale-based, Accel-backed company packages compliance, risk, policy, and case management into four connected modules - ComplianceOps, RiskOps, PolicyOps, and CaseOps - that it now frames as a Compliance & Risk Operating System (CROS). It serves thousands of customers across healthcare, financial services, education, energy, and nonprofits in more than 100 countries.
Workiva is a cloud software company that turns the painful, deadline-driven work of regulatory, financial, and sustainability reporting into a connected, audit-ready process. Founded in Ames, Iowa, in 2008 as WebFilings, its platform links data, documents, and people in real time so finance, risk, audit, and ESG teams can collect, manage, and report critical business data with full version control and traceability. Today Workiva serves more than 6,000 organizations - including a large share of the Fortune 500 - and is layering agentic AI across finance, GRC, and sustainability workflows.
Aayush Ghosh Choudhury is the Co-Founder and CEO of Scrut Automation, a SaaS-based GRC platform that automates compliance and risk management for mid-market and enterprise companies. A former McKinsey consultant and IIT Ropar / ISB graduate, he co-built Scrut after experiencing firsthand how compliance bottlenecks stall enterprise sales - discovering the solution while trying to sell a different product entirely. Under his leadership, Scrut has grown to 800+ customers globally, raised $20.5M from Lightspeed, MassMutual Ventures, and Endiya Partners, earned a LinkedIn Top 20 Startup 2024 ranking, and been recognized by G2 as a fastest-growing and highest-satisfaction product in security compliance.