soc-2
(57)
boost.ai
It's not about what AI can do. It's about what you can rely on AI to do.
Casco
Casco is a San Francisco cybersecurity startup that runs autonomous, AI-driven penetration tests on web apps, APIs, cloud infrastructure, and AI systems. Founded in 2025 by ex-AWS engineers Rene Brandel and Ian Saultz, it pairs continuous machine-driven attack simulation with human security experts, delivering compliance-ready reports for standards like SOC 2, ISO 27001, and the EU AI Act. A Y Combinator (X25) company, Casco says it serves 300+ companies and secures AI systems used across a majority of the Fortune 500.
Cashboard
Cashboard is a New York-based, Y Combinator-backed (S22) startup building a semantic layer that sits between a company's financial data and AI. It stores the metrics, data models, mappings and permissions that let AI agents - and finance teams - produce accurate, governed FP&A work: reports, dashboards and analysis pulled from 900+ connected systems. Founder Julian Rowlands frames the goal as turning AI into a 'trusted FP&A machine' and, eventually, the 'solo CFO.' The company raised a $5M seed led by FINTOP Capital in July 2026.
Golf
Golf is a Y Combinator (X25) startup building the security and governance layer for AI agents and Model Context Protocol (MCP) servers. It began as GolfMCP, an open-source Python framework for shipping production MCP servers without boilerplate, and grew into an enterprise control plane that discovers every AI agent and MCP connection in an organization (including shadow AI), enforces granular policies with sub-millisecond latency, and maintains compliance-ready audit trails. Founded by high-school friends Wojciech Blaszak and Antoni Gmitruk, who both dropped out of university to build it full-time.
Opalite Health
Opalite Health is a San Francisco-based Y Combinator (W26) startup building an AI-powered, real-time medical interpreter that lets clinicians speak with patients in 150+ languages without waiting for a human interpreter. Founded by physician Cathleen Kuo and former Apple engineer Alex Mehregan, the platform is validated against certified medical interpreters, HIPAA compliant and SOC 2 Type II certified, and is used daily by hospitals, community health centers, home health organizations, telehealth providers, and clinics across 10+ states.
Perspectives Health
Perspectives Health builds AI agents that take on the paperwork behind behavioral health care. Its software reviews patient charts every night, flags documentation that would trigger an insurance denial, writes clinical notes, and assembles utilization-review packets - so addiction and mental health programs get paid and clinicians spend less time on forms. Founded in 2024 and backed by Y Combinator's Summer 2025 batch, the company reports piloting across a dozen-plus clinics and reaching $250K in committed ARR within four weeks of launch.
Rulebase
Rulebase is a Y Combinator (F24) fintech building AI 'coworkers' that automate back-office operations for banks and fintechs. Its software reviews 100% of customer interactions across phone, email, and chat in real time to catch compliance breaches, policy violations, and fraud - including account takeovers and voice-clone scams - then routes disputes, QA reports, and follow-ups into tools teams already use like Zendesk, Jira, and Slack. Founded in 2024 by Gideon Ebose and Chidi Williams, the company raised a $2.1M pre-seed led by Bowery Capital.
Amperos Health
Amperos Health is a New York-based healthcare technology company building agentic AI that automates insurance denial management and revenue recovery for medical providers. Its AI biller, Amanda, works inside providers' existing billing systems to follow up on claims, place calls to payors, file appeals, and collect on denied and outstanding claims. Amperos serves more than 3,000 clinical locations across all 50 states and supports roughly $700 million in annual recovered revenue across 500,000+ claims. The company raised a $16M Series A led by Bessemer Venture Partners in April 2026, bringing total funding to about $20.2M.
Cassidy
Cassidy is a New York-based enterprise AI platform that lets non-technical teams build AI agents and multi-step automations powered by their own internal company data. By connecting large language models to a business's knowledge base, tools, and real-time data, Cassidy automates complex, context-heavy workflows - customer support triage, RFP responses, CRM updates from sales calls, lead qualification and internal knowledge sharing - without writing code. Founded in 2023 by Justin Fineberg and Ian Woodfill, the company raised a $10M Series A in 2025 and is used by more than 20,000 teams.
PactFi
PactFi is a New York-based fintech building the first secure, end-to-end operational platform for private credit. It replaces the fragmented email and spreadsheet workflows that private credit deals still run on with a shared, collaborative system where agents, arrangers and investors coordinate allocations, funds flow, KYC and post-close servicing in one place. Since launching in 2023 the platform has processed more than $300 billion in deal volume across 250-plus counterparties and 2,600-plus users, and in March 2026 it raised a $25M Series A led by 7RIDGE.
Predoc
Predoc is a New York-based, clinician-founded startup building an AI-native platform for health information management. It automates the retrieval, cleaning, and structuring of patient medical records - pulling data from digital sources, faxes, and direct provider requests - and turns fragmented, unstructured documents into normalized, actionable data that plugs into existing clinical and research systems. Founded in 2022, the company raised $30M (Series A led by Base10 Partners) and serves oncology groups, research networks, and virtual care providers.
Process Street
Process Street is a San Francisco-based SaaS company that helps teams turn recurring, human-driven work into structured, trackable workflows. Founded in 2014 by Vinay Patankar and Cameron McKay to tame the repetitive processes of their remote marketing agency, it began as no-code, checklist-based process software and has since repositioned as an AI-powered compliance operations platform. Today it lets non-technical teams document policies, run standardized workflows, capture data through forms, automate approvals, and prove control for standards like ISO 9001 and SOC 2 - with AI agents such as Cora monitoring execution and flagging risk.
Thoropass
Thoropass is a New York-based compliance and audit company that pairs compliance-automation software with an in-house, tech-enabled CPA and security audit firm. Founded in 2019 as Laika and rebranded in 2023, it lets companies get and stay certified across 30+ frameworks - SOC 2, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR, and ISO 42001 for AI - through a single platform where the auditor is assigned on day one. By reusing evidence across frameworks and layering AI features like First Pass AI and Smart Sort AI on top of continuous control monitoring, Thoropass helps growing businesses complete audits meaningfully faster than the traditional consultant-plus-auditor route.
InterSources Inc
InterSources Inc is a Fremont, California-based technology consultancy and Managed Security Services Provider (MSSP) founded in 2007. It pairs cybersecurity and compliance services with data analytics, AI, cloud operations, custom software development and IT staffing, serving regulated industries such as healthcare, banking, pharmaceuticals and the public sector. A certified minority- and women-owned small business, it holds ISO/IEC 27001 and SOC 2 Type II certifications and positions itself as 'built like a tech company, trusted like a partner.'
100ms
100ms builds voice-first AI agents for U.S. healthcare operations. Founded in 2020 as a low-code live video and audio infrastructure platform, the company pivoted to healthcare, applying its real-time communications expertise to automate patient access workflows - benefits verification, prior authorization, referral intake, scheduling, and intake - so care teams spend less time on phones and patients start treatment faster. Its agents are built to be HIPAA-compliant, with clinical safety guardrails and human escalation.
Blacksmith
Blacksmith is a San Francisco-based developer-tools startup building a high-performance CI cloud. Its drop-in replacement for GitHub Actions runners boots each job into a Firecracker microVM on bare-metal gaming CPUs, letting engineering teams run their pipelines up to 2x faster at roughly half the cost. Backed by Y Combinator and Google Ventures, Blacksmith serves thousands of engineering teams - including Vercel, Supabase, Mercury, Clerk and Ashby - and pairs raw compute with observability and security tooling built specifically for CI workloads.
Convey
Convey is a San Francisco AI workforce platform that lets non-technical operators build, train, and manage "digital teammates" - AI workers that take over repetitive operational tasks like invoice processing, financial reconciliation, and campaign reporting without any engineering. Founded in 2025 by former DoorDash early engineer Rohan Chopra with Stanford friends Will Harvey and Diego Canales, Convey raised a $38M Series A led by Andreessen Horowitz in June 2026 and says it has completed more than one million hours of real work for enterprises including NBCUniversal, Unity, Samsara, and Faire.
Develop Health
Develop Health is a San Francisco Bay Area healthtech company building AI that removes the paperwork between a doctor writing a prescription and a patient actually getting it. Its EHR-integrated platform uses more than a dozen purpose-built large language model pipelines to verify insurance coverage in real time, assemble and submit the correct prior authorization package, track status, and draft appeals for denials - work that normally consumes hours of a care team's day. Founded in 2022 by former Canvas Medical and Rupa Health operators, the company raised a $14.3M Series A in August 2025 and says it cuts medication-access admin work by roughly 83% while supporting hundreds of thousands of patients a month.
LiveFlow
LiveFlow is an AI-native accounting and financial operations platform that connects tools like QuickBooks Online and Xero to live dashboards in Google Sheets and Excel, automating financial reporting, multi-entity consolidation and month-end close. Founded in 2021 by former Revolut employees, the Y Combinator-backed company has grown from a spreadsheet-sync tool into 'Flow,' an agentic ERP used by more than 6,000 businesses - including Wendy's and Crumbl Cookies - and accounting firms such as BDO and KLR.
Tavrn
Tavrn is a San Francisco-based legal technology company that builds AI agents for personal injury law firms. Its platform automates the slow, manual back office of pre-litigation work - retrieving medical records from providers nationwide, turning dense records into structured medical chronologies, drafting demand letters, running client intake, and surfacing eDiscovery documents. Founded in 2022 by Pedro Paulino and Vitor Vavolizza, Tavrn targets high-volume, contingency-fee firms and pitches itself on measurable ROI: faster record retrieval, sharply reduced review time, and quicker time to settlement. The company raised a $15M Series A led by Left Lane Capital in July 2025.
Trustero
Trustero is a Palo Alto AI company building software for security and compliance teams. Founded in 2020 by SignalFx co-founder Phillip Liu, it applies generative AI and a patent-pending 'Trust Graph' to automate the grind of governance, risk and compliance (GRC): gap analysis, evidence collection, control testing, security questionnaires, third-party risk reviews and audit prep across frameworks like SOC 2, ISO 27001, FedRAMP, PCI, SOX and DORA. In November 2024 it raised a $10.35M Series A led by Bright Pixel Capital.
Vectara
Vectara is a Palo Alto-based enterprise AI company building a trusted, end-to-end platform for retrieval-augmented generation (RAG) and AI agents. Founded in 2022 by former Google AI researchers, it lets companies embed grounded, citation-backed GenAI - conversational assistants, semantic search, and agents - into their products while actively detecting and correcting hallucinations at runtime. Its stack includes the Boomerang embedding model, the RAG-tuned Mockingbird LLM, the open-source Hughes Hallucination Evaluation Model (HHEM), and a Guardian Agent layer, positioning Vectara as a leader in factual, secure, compliance-ready enterprise AI.
Zania
Zania builds autonomous AI agents for governance, risk, and compliance (GRC). Founded in 2023 by former CISO Shruti Gupta, the Palo Alto company deploys domain-specific 'AI teammates' that run third-party risk reviews, controls testing, evidence collection, security questionnaires, and continuous compliance across frameworks like SOC 2, ISO 27001, and HIPAA - work it claims runs up to 30x faster at 90% lower cost with 94%+ accuracy. It raised an $18M Series A led by NEA in 2025.
Ambient
Ambient is a San Francisco startup building an AI Chief of Staff - a shared brain for leadership teams that pulls context scattered across meetings, chat, email, and docs and organizes it around the initiatives that matter. Founded in 2023 by Lawrence Coburn, Brandon Catcho, and Taylor McLoughlin, the product delivers daily prep dossiers, secure meeting notes, and red/yellow/green tracking on make-or-break initiatives for CEOs, Chiefs of Staff, and BizOps teams.
Apero Health
Apero Health is a San Francisco-based, Y Combinator-backed healthcare software company that folds scheduling, clinical visit notes, revenue cycle management, patient billing, e-prescriptions, and financial reporting into a single API-first platform. Founded in 2019 by Jacinda and Nick Shelly, Apero aims to bring transparency and speed to the notoriously opaque business of getting doctors paid - promising implementation in under a day, claim denials cut through custom validation rules, and payer enrollment across all 50 states.
BEMO
BEMO is a Redmond, Washington-based managed IT and security service provider built specifically for small and mid-sized businesses that run on Microsoft 365 and Azure. Founded in 2010 by ex-Microsoft veterans Bruno Lecoq and Joel Lachance, the fully remote company bundles cybersecurity, compliance (SOC 2, ISO 27001, CMMC, NIST 800-171), managed helpdesk, and AI/Copilot security into packaged tiers so 10-to-500-person organizations can meet audit requirements without hiring an in-house security team. BEMO is a repeat Microsoft US Partner of the Year and a four-time Inc. 5000 honoree.
Cake
Cake is a New York-based startup that bundles the sprawling open-source AI stack into a single managed platform, so companies - especially in regulated industries like finance, insurance and healthcare - can deploy AI inside their own cloud without wiring together 100+ tools by hand. Founded in 2022 by Misha Herscu and Skyler Thomas and launched from stealth in December 2024 with a $13M seed led by Google's Gradient Ventures, Cake handles the integration, security, governance and cost-monitoring glue around open-source components like LangChain, Ray, MLflow and vector databases, all deployed inside a customer's own VPC so data never leaves.
Century Health
Century Health is a New York-based health technology company that turns fragmented, messy electronic health record data into clean, structured, analysis-ready real-world evidence. Its AI-powered platform, CHARM (Century Health Abstraction & Retrieval Model), automates the curation, abstraction, and de-identification of clinical data to build disease-specific patient registries for pharmaceutical and life sciences research. Founded in 2023 by Vish Srivastava and Sanjay Hariharan, the company reports 97% accuracy against clinical expert judgment and raised a $5M seed round in 2026 led by Origin Ventures.
Change
Change is a San Francisco fintech that lets businesses plug charitable giving directly into their products. Its Donations API and compliance dashboard connect companies to more than a million U.S. nonprofits, automating the tedious parts of giving - nonprofit verification, fund disbursement, and the tangle of state fundraising regulations like California's AB 488. Companies such as Lyft, Brex, and Bonfire use Change to run round-ups, sweepstakes, loyalty-point donations, and percentage-of-purchase campaigns without building giving infrastructure themselves.
Clearpol Inc.
Clearpol is a San Francisco healthtech company that builds AI tools for post-acute and long-term care providers. Its platform reads a facility's clinical data and regulatory environment, then automates the paperwork nobody likes: drafting CMS Form 2567 Plans of Correction, flagging resident risk before it escalates, and answering questions about federal and state nursing-home regulations. Positioned as a compliance 'co-pilot' for skilled nursing facilities, Clearpol says it is trusted by 900+ long-term care facilities and has written thousands of Plans of Correction.