Transcend.

The quiet plumbing behind your right to be forgotten

Somewhere right now, a stranger is typing "delete my account" into a form they will never think about again. The request fans out across dozens of databases, warehouses, and third-party tools - the kind of sprawl that used to take a privacy team weeks of email and pleading. It resolves in minutes. Nobody claps. That invisible resolution is Transcend's entire business.

Transcend calls itself "the compliance layer for customer data," which is a tidy way of describing something genuinely sprawling. It maps where personal data lives, deletes or returns it on command, collects and enforces consent across websites and apps, and - more recently - watches what flows in and out of large language models. The company is roughly 90 people, headquartered in San Francisco, and most of the 1.2 billion people who rely on its software have never heard its name. That is rather the point.

Good infrastructure is invisible by design. Nobody admires the pipes until the water stops. Transcend has spent its existence building the kind of plumbing that earns no applause when it works and a regulatory fine when it doesn't - which is a strange business to be in, and an unusually durable one. The companies that sign up are not buying enthusiasm. They are buying the ability to sleep through an audit.

Your data was never really yours to command

Here is the uncomfortable truth Transcend was built on: for most of the internet's life, the promise of "you control your data" was a marketing line, not an engineering fact. Privacy law - GDPR, then CCPA, then a parade of acronyms - declared that people had rights. Companies, meanwhile, had data scattered across systems nobody had fully inventoried since the last reorg.

The gap between the law and the architecture is where privacy teams quietly drowned. A single "delete my data" request could mean tracking down records in a dozen systems, each owned by a different team, none of them eager to help. Compliance became a customer-service maze wrapped in a legal labyrinth. Expensive, slow, and impossible to prove.

And the law kept multiplying. GDPR set the template in Europe; California answered with CCPA; then a steady drip of state and national regulations, each with its own deadlines and definitions. Every new rule widened the gap. The companies on the hook were not negligent so much as overwhelmed - asked to honor rights they had never built the systems to honor. The penalty for getting it wrong was measured in millions; the tooling for getting it right barely existed.

Most people, confronted with that maze, shrug and move on. The founders of Transcend, irritatingly, did not.

Two students, one stubborn question

In 2017, Ben Brook and Mike Farrell were students at Harvard with a small, reasonable request: could they get their own data back from the apps they used every day - Spotify, Uber, Fitbit? The question seemed trivial. The answer, it turned out, was a mess of forms, dead ends, and silence.

Brook had studied computer science, astrophysics, and neuroscience, and on the side was an award-winning filmmaker - the kind of resume that suggests a person allergic to picking one lane. Farrell took the CTO seat. Their bet was contrarian for its time: that privacy was not a legal checkbox but an infrastructure problem, and infrastructure problems get solved with software, not lawyers.

Six tools, one job: make data obey

Transcend's platform reads like a list of the exact tasks that once made privacy teams reach for the aspirin. Each one is the same trick - take a manual, error-prone, unprovable process, and turn it into software that runs on autopilot.

The product line, arranged like a tasting menu for people whose job title contains the words "Chief," "Privacy," or "Officer."

From dorm room to data backbone

The receipts are public

Privacy software is easy to promise and hard to verify. Transcend's argument is unusually numeric: the savings, the scale, and the customer roster are all stated out loud. Skeptics, this section is for you.

A chart that mostly proves one thing: deleting data by hand is the single most expensive way to do it.

The customers back the math. Robinhood, Patreon, Clubhouse, Brex, Ironclad, Indiegogo, MasterClass, and Microsoft have all run privacy operations on Transcend. Indiegogo alone reported cutting privacy request processing costs by 80%. The investors - Accel, Index Ventures, StepStone, 01 Advisors, Script Capital, South Park Commons - bet roughly $90M that this becomes default infrastructure.

It is a telling roster. Fintech (Robinhood, Brex), creator platforms (Patreon, Indiegogo), education (MasterClass), and a software giant (Microsoft) do not share an industry; they share a problem. Each sits on a mountain of customer data and a legal obligation to govern it. That breadth is the closest thing privacy software has to a proof of concept: when the use case is "you have data and the law has opinions about it," the addressable market is more or less everyone. The recognition followed the customers - Fast Company's Most Innovative Companies in 2024, a Leader placement in IDC's MarketScape in 2025, and a repeat appearance on the Deloitte Technology Fast 500.

Give the individual back the controls

Strip away the enterprise language and Transcend's mission is the same one from that dorm room: "rise above the status quo and empower the individual to take control of their data." The grander framing now is to be the layer that lets companies unlock first-party data responsibly - for AI, for personalization - without trampling the person it came from.

It is a careful balance. Companies want to use data; people want a say in how. For years those goals were treated as opposites. Transcend's wager is that good infrastructure dissolves the trade-off - that you can move fast and honor consent, if the honoring is automated rather than aspirational.

AI just made the problem bigger

The arrival of large language models did not retire the privacy problem - it supercharged it. Models trained on customer data, prompts carrying sensitive records, outputs nobody audits: the old maze, now moving at machine speed. Transcend's Pathfinder is its answer, a governance layer that watches what data enters and leaves an LLM and keeps a record you can show a regulator.

That is the bet for the next decade. If AI runs on data, and data is governed by an expanding thicket of law, then someone has to sit in the middle making the two coexist. Transcend would very much like to be that someone. The company's framing has shifted accordingly - from "privacy compliance" to "the compliance layer for customer data," a phrase broad enough to cover whatever the next regulation invents. It is a hedge dressed as a mission statement, and a sensible one.

There is a quiet irony in all of this. The founders started by trying to claw back their own data from a handful of consumer apps, and ended up building the machinery that thousands of companies use to hand data back to everyone else. The grievance became the infrastructure. The thing they wanted as users, they now sell to the businesses that once stonewalled them.

Return, for a moment, to that stranger typing "delete my account." A few years ago the request would have triggered weeks of quiet panic on some compliance team. Now it resolves before they've closed the tab. The internet did not get more honest on its own. Someone built the layer that made the promise true - and then made sure nobody had to think about it again.

Demos & interviews