Skip to content

Market map

The funded GRC landscape

124 funded vendors, sorted into 12 categories from 103 different self-descriptions, headquartered across 6 regions. This shows where capital has concentrated, and where it has not. Click a category to see every vendor in it.

By category

Vendors by categoryEnterprise GRC platform: 27; SOC 2 and ISO 27001 automation: 23; Privacy and data governance: 13; Industry-specific: 12; AI governance: 11; Financial services compliance: 9; Third-party risk: 6; Questionnaires and trust centers: 5; Healthcare compliance: 5; Tax and e-invoicing: 5; Supply chain and ESG: 4; Compliance training: 4Enterprise GRC platform27SOC 2 and ISO 27001 automation23Privacy and data governance13Industry-specific12AI governance11Financial services compliance9Third-party risk6Questionnaires and trust centers5Healthcare compliance5Tax and e-invoicing5Supply chain and ESG4Compliance training4

By headquarters

Where each company is actually based, taken from its registered or primary headquarters rather than from the markets it sells into. A vendor selling worldwide from one office still counts once, in that office's region.

Vendors by headquarters regionNorth America: 90; Europe: 16; United Kingdom: 10; Middle East: 4; Latin America: 2; Asia Pacific: 2North America90Europe16United Kingdom10Middle East4Latin America2Asia Pacific2
RegionVendorsShareExamples
North America9073%Affil.ai, Affinity (compliance training), Alloy
Europe1613%AccessOwl, ComplyDo, Copla
United Kingdom108%Arva AI, Cardamon, ComplyAdvantage
Middle East43%Lema, Qadi, Scytale
Latin America22%Regcheq, Snap Compliance
Asia Pacific22%6clicks, Kollate-it