MaRS Investment Accelerator Fund (IAF) is an early stage venture capital firm based in Toronto. Since 2008, we have partnered with over 150 companies built by extraordinary founders. For more information, please visit www.marsiaf.com

MaRS Investment Accelerator Fund

Graphite Ventures

Inovia Capital is a venture capital firm that works with founders to create influential and permanent businesses. The team leverages an operator mindset to provide founders with support, mentorship, and access to a worldwide network. Inovia manages over US$2.2B with operations in Montreal, Toronto, Calgary, San Francisco, and London.

Inovia Capital

Cavelo

Cavelo provides a data discovery platform that enables organizations to discover, classify, and manage sensitive data using machine learning algorithms in compliance with regulations such as GDPR and CCPA. Cavelo’s cloud-based platform continuously scans and identifies sensitive data from sources, including cloud applications and endpoint devices such as servers, laptops, and mobile devices. As of February 2021, Cavelo reported clients from the manufacturing, utilities, and municipal sectors.

New data privacy regulations have opened up space for a new wave of compliance-focused startups.

Digital Privacy Tools

Cynomi Enters into Strategic Partnership with Cavelo to Offer Comprehensive Cyber Solutions

Cavelo provides a data discovery platform that enables organizations to discover, classify, and manage sensitive data using machine learning algorithms in compliance with regulations such as GDPR and CCPA. Cavelo’s cloud-based platform continuously scans and identifies sensitive data from sources, including cloud applications and endpoint devices such as servers, laptops, and mobile devices. As of February 2021, Cavelo reported clients from the manufacturing, utilities, and municipal sectors.

OneTrust provides compliance solutions that leverage AI tools and automation across all areas of privacy compliance. The company’s AI-powered solution sees widespread use, providing automation in the areas of data discovery, data subject rights management, consent management (with a user-facing preference center for greater control), data protection impact assessments, third-party risk management, incident response reporting, and monitoring.The company also provides regulatory research software that companies can use to train staff and even benchmark their own privacy programs. The company’s Government Records Request Automation solution helps government organizations intake requests, automate data discovery and redaction, and provide a secure two-way communication portal that demonstrates compliance with FOIA, PRR, and the Privacy Act. OneTrust’s products were backed by over 200 patents as of September 2024.OneTrust has strengthened its position in the digital privacy space through several acquisitions in recent years. In March 2021, OneTrust acquired DocuVision, an AI-powered data redaction platform to bolster its data subject rights capabilities through automatic redaction of non-relevant sensitive information. During the same month, OneTrust acquired Convercent to enhance its platform through advanced ethics and compliance capabilities, and helpline and disclosure management. OneTrust acquired the security assurance and certification platform Tugboat Logic in September 2021, to automate its InfoSec assurance and certification processes. Other notable acquisitions include Privacy Core e-learning, DataGuidance, and Integris Software.In March 2023, OneTrust announced the addition of certification automation to the OneTrust GRC and Security Assurance Cloud. This solution which combines automation, pre-built policies and controls spanning 29 industry frameworks, over 100 integrations, compliance content, and expert guidance enables customers to simplify and streamline compliance tasks according to OneTrust.Key customers and partnershipsAs of September 2024, OneTrust said it served over 14,000 active customers, including 75 of the Fortune 100. The company claims it serves notable organizations from all industries, with Adobe, Walgreens, Samsung, and Mearsk among its customer base.OneTrust entered a partnership with Dow Jones Risk and Compliance in April 2023, to incorporate risk and compliance data into its third-party due diligence solution.

OneTrust

CENTRL provides automated risk management and privacy management solutions. Through its Privacy360 platform, the company provides solutions to identify compliance gaps, automate data discovery, manage data subject rights requests, consent management (with a user-facing preference center), carry out impact assessments, third-party risk management, monitoring, and reporting.

CENTRL

HighSide provides a secure communications platform for organizations, enterprise archiving solutions, data discovery, and supervision tools in compliance with GDPR, CCPA, etc. In 2019, the company announced the acquisition of Hotshot Technologies, a secure team messaging platform.

HighSide

SecuPI provides a patented platform enabling organizations to achieve compliance with regulations such as GDPR and CCPA. The platform achieves this by providing multiple features to protect data such as pseudonymization, consent controls, audit logs, streamlining breach notifications, etc. SecuPI’s platform is deployed in organizations in the banking, insurance, telecommunications, and health industries.

SecuPi

JoinPrivacy is a B2C solution that allows users to manage their personal data from the websites they use, all from one place.

JoinPrivacy

Solutions to prevent the tracking and collection of the personal data of end-users.

Encrypted communications and data exchanges for internal and external collaboration around sensitive data.

Tools to provide compliance with privacy regulations, such as GDPR and CCPA, and carry out tasks such as data discovery, data governance, consent management, Data Subject Rights (DSR) management, Data Protection Impact Assessments (DPIA) and managing incident response as mandated by these privacy regulations.

Synthetic data generation, data de-identification and anonymization, and other solutions for managing sensitive data.

Storage infrastructure for holding data in compliance with regulations such as GDPR or data residency requirements.

Central management of data access and data privacy and security policies.

Uses AI/ML to automate workflows such as data discovery and data classification

Uses generative AI to provide conversational recommendations to users to remain compliant with privacy regulations

Solutions in this industry hub are offered under a B2B SaaS model

Cavelo

About EDGE

Contact Us

Resources

Area of Focus

Technology Research Made Effortless