Toba Capital is an investment firm committed to helping create incredible technology companies. We specialize in business applications, IT, and internet infrastructure markets.

Toba Capital

Riverwood Capital is a growth-stage technology investment firm that invests in technology companies in need of financial and intellectual capital to scale.

Riverwood Capital

Hyperproof

Hyperproof is a cloud-based compliance operations software that collects evidence automatically and manages a compliance program. It serves as a system of record for an organization’s compliance data and gives teams involved in compliance the tools they need to collaborate with stakeholders in and outside of their organization.  With this innovative approach, it helps organizations meet their aspirations and demonstrate their commitment to protecting their customers, shareholders, partners, and suppliers along with the community. The software not only reduces administrative work from compliance processes, but it also helps organizations mitigate their risks on an ongoing basis which is especially important in a time when the regulatory and economic environments are uncertain and cybersecurity risk is on the rise.

Hyperproof delivers a risk, compliance, and privacy command center to manage compliance workflows of an organization which includes streamlining project management, automating manual processes (compliance evidence collection and testing), and audit preparation. Hyperproof’s compliance operations platform integrates with the entire company ecosystem, and its compliance workflows automatically identify and flag compliance issues when they happen and provide remediation tasks accordingly. Organizations can manage daily compliance operations, track risk (via a central risk register), prepare risk mitigation plans, map risks to existing security controls, and track their progress in real-time.

New data privacy regulations have opened up space for a new wave of compliance-focused startups.

Digital Privacy Tools

Hyperproof delivers a risk, compliance, and privacy command center to manage compliance workflows of an organization which includes streamlining project management, automating manual processes (compliance evidence collection and testing), and audit preparation. Hyperproof’s compliance operations platform integrates with the entire company ecosystem, and its compliance workflows automatically identify and flag compliance issues when they happen and provide remediation tasks accordingly. Organizations can manage daily compliance operations, track risk (via a central risk register), prepare risk mitigation plans, map risks to existing security controls, and track their progress in real-time.Key customers and partnershipsThe company’s platform is used by several technology and Fortune 1000 companies such as 3M, Motorola Solutions, Sophos, Fortinet, Instacart, and Netflix. Hyperproof supports over 50 compliance frameworks including the GDPR and CCPA and integrates with cloud services such as AWS, Azure, Google Cloud, GitHub, Okta, Jamf, Jira, and ZenDesk, to automate evidence management and support collaboration between stakeholders. The company provides its platform at a minimum subscription price of USD 4,800 per annum.Funding and financialsIn August 2023, the company <a href="https://sp-edge.com/updates/21414">raised USD 40 million</a> in a funding round led by Riverwood Capital, reportedly doubling its valuation in nine months. The company expected to use the funds to further develop its platform, hire additional staff, and invest in go-to-market activities.

<div>
 
 OneTrust provides compliance solutions that leverage AI tools and automation across all areas of privacy compliance. OneTrust Athena, the company&rsquo;s AI-powered solution, provides automation in the areas of data discovery, data subject rights management, consent management (with a user-facing preference center for greater control), data protection impact assessments, third-party risk management, incident response reporting, and monitoring. The company also provides regulatory research software that companies can use to train staff and even benchmark their own privacy programs. The company&rsquo;s Government Records Request Automation solution helps government organizations intake requests, automate data discovery and redaction, and provide a secure two-way communication portal that demonstrates compliance with FOIA, PRR, and the Privacy Act.
 
 
 OneTrust has strengthened its position in the digital privacy space through several acquisitions in recent years. In March 2021, OneTrust acquired DocuVision, an AI-powered data redaction platform to bolster its data subject rights capabilities through automatic redaction of non-relevant sensitive information. During the same month, OneTrust acquired Convercent to enhance its platform through advanced ethics and compliance capabilities, and helpline and disclosure management. OneTrust acquired the security assurance and certification platform Tugboat Logic in September 2021, to automate its InfoSec assurance and certification processes. Other notable acquisitions include Privacy Core e-learning, DataGuidance, and Integris Software.
 
 
 In March 2023, OneTrust announced the 
 <a href="https://sp-edge.com/updates/16852">
 addition of certification automation
 </a>
 to the OneTrust GRC and Security Assurance Cloud. This solution which combines automation, pre-built policies and controls spanning 29 industry frameworks, over 100 integrations, compliance content, and expert guidance enables customers to simplify and streamline compliance tasks according to OneTrust.
 
 
 Key customers and partnerships
 
 
 OneTrust entered a partnership with Dow Jones Risk and Compliance in April 2023, to incorporate risk and compliance data into its third-party due diligence solution.&nbsp;&nbsp;
 
 
 Funding and financials
 
 
 The company employed 3,000 people, served more than 12,000 customers (including 75% of the Fortune Global 500 companies), and its solutions are backed by 200 patents, as of January 2022. In June 2022, OneTrust 
 <a href="https://sp-edge.com/updates/11018">
 laid off 950 employees
 </a>
 (~25% of its global workforce) across its departments in Atlanta (US), Bengaluru (India), and London (UK), due to worsening global financial crisis and to balance between growth and profitability.
 
 
 OneTrust&rsquo;s 
 <a href="https://sp-edge.com/updates/20390">
 most recent funding
 </a>
 was in July 2023, where it raised USD 150 million in a round led by Insight Partners at a valuation of USD 4.5 billion. The company expects to use the combined funding to scale its platform to meet increasing demand.&nbsp;
 
 
 This funding was raised at a lower valuation, down from the USD 5.1 billion OneTrust recorded during its December 2020 Series C round (USD 300 million), however the company reports it has doubled ARR to USD 400 million, grown customer numbers from 7,500 to over 14,000, and increased headcount from 1,500 to over 2,000 over the same period.
 
</div>

OneTrust

<div>
 
 Privitar provides a platform that enables companies to leverage personal data in their databases for analysis without compromising the end user&rsquo;s safety and privacy. The company&rsquo;s solutions handle and process data compliant with privacy regulations such as GDPR and CCPA.
 
 
 The company&rsquo;s platform provides de-identification solutions to enable the use of personal data while maintaining data utility. Use cases include business intelligence, insights, Anti-Money Laundering (AML) analysis, etc. The platform also includes features to manage secure data sharing and invisible data watermarks to track data movement throughout the organization.
 
 
 In July 2022, Privitar 
 <a href="https://sp-edge.com/updates/11586?industryIds=34">
 acquired
 </a>
 the UK-based regulatory intelligence platform Kormoon to use the latter&rsquo;s repository of data privacy rules across 46 jurisdictions and automate policies in its own data provisioning platform. The company deemed this repository as a &ldquo;strategic asset&rdquo;&mdash;something that would take it years to build on its own. Kormoon provides a regulatory intelligence platform that analyzes the data usage behavior of companies to determine and automate necessary actions to achieve compliance with privacy regulations such as the GDPR and CCPA. Privitar expects to launch Kormoon&rsquo;s regulatory intelligence to users of Privitar by the end of 2022, although it&rsquo;s unclear whether Kormoon&rsquo;s offerings will continue to be sold as a separate product in the long term.
 
 
 In June 2023, enterprise data management firm Informatica announced 
 <a href="https://sp-edge.com/updates/19444">
 it was in talks to acquire
 </a>
 Privitar.
 
 
 As of November 2020, Privitar employed over 200 staff and has offices in the UK, the US, Singapore, and Poland.
 
 
 Key customers and partnerships
 
 
 Privitar expanded the relationship it had with HSBC through its Series C fundraise, as HSBC was the first customer for Privitar in 2016. In addition to HSBC, Privitar also has other customer-turned-investors such as Citi.
 
 
 Funding and financials
 
 
 Privitar&rsquo;s most recent funding round was in June 2020, where it raised USD 7 million as a Series C investment led by HSBC Venture Capital Coverage Group. With USD 80 million raised in April 2020, its total Series C funding now amounts to USD 87 million. The company intended to use the funding to accelerate product development, hire additional staff, and focus on international expansion.
 
</div>

Privitar

<div>
 
 CENTRL provides automated risk management and privacy management solutions. Through its Privacy360 platform, the company provides solutions to identify compliance gaps, automate data discovery, manage data subject rights requests, consent management (with a user-facing preference center), carry out impact assessments, third-party risk management, monitoring, and reporting.
 
</div>

CENTRL

<div>
 
 HighSide provides a secure communications platform for organizations, enterprise archiving solutions, data discovery, and supervision tools in compliance with GDPR, CCPA, etc. In 2019, the company announced the acquisition of Hotshot Technologies, a secure team messaging platform.
 
</div>

HighSide

<div>
 
 SecuPI provides a patented platform enabling organizations to achieve compliance with regulations such as GDPR and CCPA. The platform achieves this by providing multiple features to protect data such as pseudonymization, consent controls, audit logs, streamlining breach notifications, etc. SecuPI’s platform is deployed in organizations in the banking, insurance, telecommunications, and health industries.
 
</div>

SecuPi

Uses AI/ML to automate workflows such as data discovery and data classification

Uses generative AI to provide conversational recommendations to users to remain compliant with privacy regulations

Solutions in this industry hub are offered under a B2B SaaS model

Tools to provide compliance with privacy regulations, such as GDPR and CCPA, and carry out tasks such as data discovery, data governance, consent management, Data Subject Rights (DSR) management, Data Protection Impact Assessments (DPIA) and managing incident response as mandated by these privacy regulations.

Hyperproof

Digital Privacy Tools

Key stats

Recent Updates

Compliance and risk management startup Hyperproof raises USD 40 million

Hyperproof raises USD 16.5 million in Series A

Company Brief

Funding

Investors

About EDGE

Contact Us

Resources

Area of Focus

Technology Research Made Effortless