third-party-risk-management
(9)
Cape.ai
Cape.ai (formerly Cape Privacy) is a New York-based enterprise AI company building an agentic automation platform purpose-built for financial services. Founded in 2018 by Che Wijesinghe and Gavin Uhma, Cape lets banks, asset managers and insurers automate document-heavy back-office work - enhanced due diligence, SOC-report and third-party risk analysis, KYC/AML onboarding and regulatory reporting - using AI agents that are fully cited, auditable and deployable on-premise or in a private cloud so sensitive data never leaves the customer's environment.
Lema AI
Lema AI is a New York-based cybersecurity startup building an agentic AI platform for third-party risk management (TPRM). Founded by three veterans of Israel's Unit 8200, Lema replaces static vendor questionnaires and check-the-box compliance with continuous, behavior-based analysis that maps how vendors actually operate inside an enterprise - tracking data access, permission changes and 'risk drift' to surface real attack paths. The company emerged from stealth in February 2026 with roughly $24M in total funding, including a $17.5M Series A led by Team8.
Omnea
Omnea is an AI-native procurement orchestration platform that turns the slow, fragmented process of requesting, vetting, buying and renewing suppliers into a single, governed workflow. Founded in 2022 by former Tessian executives Ben Freeman and Ben Allen, the London- and New York-based company gives employees one 'front door' to make purchase requests in natural language, then automatically routes those requests to the right people and systems while tracking spend, risk and renewals. It serves enterprises including Spotify, Wise, MongoDB, Albertsons and Adecco, and has raised over $75M from Insight Partners, Khosla Ventures, Accel and others.
Rescana
Rescana is a cybersecurity company that builds autonomous, AI-agent-driven third-party risk management (TPRM) and external attack surface management software. Its platform discovers, classifies, assesses, monitors, and helps remediate risk across a company's vendor ecosystem - including vendors with no web presence - using agentic AI and open-source intelligence (OSINT). Founded by Guy Halfon and based between New York and Tel Aviv, Rescana targets regulated, vendor-heavy industries such as banking, telecom, healthcare, real estate and government, promising vendor-risk oversight that scales without a proportional increase in security headcount.
Supply Wisdom
Supply Wisdom is a New York-based SaaS company that delivers real-time, continuous third-party and location risk intelligence. Its platform monitors suppliers and business locations across seven risk domains - financial, cyber, operational, compliance, ESG/sustainability, nth-party, and location - tracking 350+ risk metrics and pushing early-warning alerts so enterprises can act before a disruption hits. Its clients are Fortune 100 and Global 2000 firms in financial services, insurance, healthcare, and technology.
Relyance AI
Relyance AI is a San Francisco-based enterprise software company that maps how data actually moves through an organization - from source code and cloud infrastructure to third-party apps and AI models - and continuously checks that movement against customer contracts, privacy regulations, and compliance frameworks. Founded in 2020 by Abhi Sharma and Leila Golchehreh, the company sells an AI-native data governance and security platform used by companies including Coinbase, Snowflake, Notion, Plaid, and Canva. It raised a $32M Series B in October 2024 led by Thomvest Ventures, bringing total funding to roughly $62-67M.
TerraTrue
TerraTrue is a San Francisco privacy and security platform that bakes compliance into the product-development process instead of bolting it on at the end. Founded in 2018 by two former Snap executives, it automates privacy, AI, and third-party risk reviews from intake to approval - flagging GDPR, CCPA, and AI Act issues while products are still being designed, not after they ship. Customers like Lyft, Roku, and Elastic use it to turn slow legal bottlenecks into fast, repeatable workflows.
Aravo Solutions
Aravo Solutions is a San Francisco-based enterprise SaaS company that builds cloud software for third-party risk, governance, and compliance. Its Intelligence First Platform - now wrapped with an AI agent layer called Aravo AI - helps Fortune 500 companies manage vendors, suppliers, and partners across 154 countries and 36 languages.
Safe Security
Safe Security is a Palo Alto-based cybersecurity company building an Agentic AI-native platform for cyber risk quantification (CRQ), third-party risk management (TPRM) and continuous threat exposure management (CTEM). Founded in 2012 in India as Lucideus, it now translates security posture into dollars-and-cents risk for enterprises like Google, Chevron, T-Mobile, Fidelity and IHG, and is pursuing what its founders call 'CyberAGI'.