governance-risk-compliance
(12)
SoftExpert and the end of the paper chase
A factory can make a perfect part and still lose the paperwork that proves it. SoftExpert built a business connecting the work, the records and the people who must sign off.
Inovaare wants the audit to be a non-event
A health plan can resolve a complaint and still struggle to prove it did the right thing. Inovaare connects the case, the rule and the evidence - then offers to run the operation, too.
NAVEX Turned the Ethics Hotline Into a $2.5 Billion Risk Machine
The company began as a private-equity roll-up of four compliance specialists. Fourteen years later, its real advantage is not the hotline - it is the data trail that begins when someone decides to speak up.
Mitratech Built a Compliance Empire. Now It Has to Make the Pieces Feel Like One Product.
The 39-year-old legal-tech veteran stitched together matter management, risk, HR compliance and workflow automation. The bet is that regulated teams want one governed system more than another clever point solution.
Diligent Put the Board Book on an iPad. Now It Wants the Whole Risk Business
The board portal pioneer survived an accounting-control stumble, a $624 million take-private and a decade of acquisitions. Its next trick is turning every risk signal into something a director can use before the meeting starts.
LRN's $1.4 Million Case for Making Compliance Training Less Boring
LRN spent three decades turning the corporate training everyone dreads into a source of behavioral data. Its best proof is not a lofty ethics slogan - it is 19,000 hours returned to one client's workforce.
Riskonnect's $683,000 Bet: Put Every Corporate Risk Under One Roof
Most companies still manage danger in spreadsheets and departmental silos. Riskonnect built a sprawling enterprise platform to connect the clues - and one commissioned study shows both the appeal and the price of the bet.
The Company That Made Audit Season Boring
Meiran Galis spent years at EY watching startups treat security audits like a fire drill. Scytale is his bet that compliance can run in the background instead of eating a quarter.
Compyl
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
Trustero
Trustero is a Palo Alto AI company building software for security and compliance teams. Founded in 2020 by SignalFx co-founder Phillip Liu, it applies generative AI and a patent-pending 'Trust Graph' to automate the grind of governance, risk and compliance (GRC): gap analysis, evidence collection, control testing, security questionnaires, third-party risk reviews and audit prep across frameworks like SOC 2, ISO 27001, FedRAMP, PCI, SOX and DORA. In November 2024 it raised a $10.35M Series A led by Bright Pixel Capital.
VComply
VComply is a cloud-based governance, risk, and compliance (GRC) platform that helps mid-market organizations turn compliance from scattered spreadsheets and missed deadlines into a single system of record. Founded in 2019 by Harshvardhan Kariwala after a costly missed filing at a prior business, the Sunnyvale-based, Accel-backed company packages compliance, risk, policy, and case management into four connected modules - ComplianceOps, RiskOps, PolicyOps, and CaseOps - that it now frames as a Compliance & Risk Operating System (CROS). It serves thousands of customers across healthcare, financial services, education, energy, and nonprofits in more than 100 countries.
Workiva
Workiva is a cloud software company that turns the painful, deadline-driven work of regulatory, financial, and sustainability reporting into a connected, audit-ready process. Founded in Ames, Iowa, in 2008 as WebFilings, its platform links data, documents, and people in real time so finance, risk, audit, and ESG teams can collect, manage, and report critical business data with full version control and traceability. Today Workiva serves more than 6,000 organizations - including a large share of the Fortune 500 - and is layering agentic AI across finance, GRC, and sustainability workflows.