BossaNova is the number one Brazilian Micro Venture Capital. We are the most active investor in the pre-seed stage in Latin America with more than 1200 investments in over 1000 Startups. We also invest in global companies, directly or through co-investment syndicates on AngelList.

Bossanova Investimentos

3L is an investment firm based in Los Angeles and New York that provides growth capital to companies in the technology, consumer, and data services sectors.

3L Capital

overtime.vc

TerraTrue

TerraTrue is the first privacy platform designed to seamlessly work with product development. The company was founded by former ex-Snap execs who built that company's privacy and security programs from scratch. They joined forces to seamlessly integrate privacy-by-design into the software development lifecycle. Its growing team is creating intelligent tools that solve every company's privacy challenges -- from GDPR to CCPA and everything else -- while actually speeding up the pace of execution.  By incorporating a smart privacy tool like TerraTrue, teams can use collaborative and smart workflows to align around new features, flag risks, bring structure to their data, map that data in real-time, and ship software with confidence.  TerraTrue was founded in 2018 and based in San Francisco, California.

<div>TerraTrue offers a platform focused on product and feature development teams to implement privacy-by-design concepts throughout the entire development lifecycle, enabling companies to comply with privacy regulations such as GDPR and CCPA. TerraTrue’s platform tracks privacy risks to new product features as they are being developed, providing suggestions and automating actions to rectify the privacy issues. The platform also keeps track of privacy regulations, allowing businesses to stay ahead of any changes to the law. The platform integrates with tools such as GitHub, Jira, Google Drive, and Slack to facilitate collaboration throughout the development process. As of April 2021, the company was working on adding more integrations to the platform and developing APIs that will enable large organizations to integrate TerraTrue into their own custom development tools. </div>

New data privacy regulations have opened up space for a new wave of compliance-focused startups.

Digital Privacy Tools

<div>
 
 TerraTrue offers a platform focused on product and feature development teams to implement privacy-by-design concepts throughout the entire development lifecycle, enabling companies to comply with privacy regulations such as GDPR and CCPA. TerraTrue’s platform tracks privacy risks to new product features as they are being developed, providing suggestions and automating actions to rectify the privacy issues. The platform also keeps track of privacy regulations, allowing businesses to stay ahead of any changes to the law. The platform integrates with tools such as GitHub, Jira, Google Drive, and Slack to facilitate collaboration throughout the development process. As of April 2021, the company was working on adding more integrations to the platform and developing APIs that will enable large organizations to integrate TerraTrue into their own custom development tools. 
 
 
 
 
 The company was founded by former Snapchat executives and employed 15 staff members as of April 2021. TerraTrue emerged out of beta during Q3 2020 and counts companies such as Wish and VSCO among its clients. 
 
 
 
 
 TerraTrue raised USD 15 million in Series A funding during April 2021 in a round led by 3L. The company expects to use the funding to double its headcount during 2021, expanding in the areas of product development, sales, and marketing.
 
</div>

<div>
 
 OneTrust provides compliance solutions that leverage AI tools and automation across all areas of privacy compliance. OneTrust Athena, the company&rsquo;s AI-powered solution, provides automation in the areas of data discovery, data subject rights management, consent management (with a user-facing preference center for greater control), data protection impact assessments, third-party risk management, incident response reporting, and monitoring. The company also provides regulatory research software that companies can use to train staff and even benchmark their own privacy programs. The company&rsquo;s Government Records Request Automation solution helps government organizations intake requests, automate data discovery and redaction, and provide a secure two-way communication portal that demonstrates compliance with FOIA, PRR, and the Privacy Act.
 
 
 OneTrust has strengthened its position in the digital privacy space through several acquisitions in recent years. In March 2021, OneTrust acquired DocuVision, an AI-powered data redaction platform to bolster its data subject rights capabilities through automatic redaction of non-relevant sensitive information. During the same month, OneTrust acquired Convercent to enhance its platform through advanced ethics and compliance capabilities, and helpline and disclosure management. OneTrust acquired the security assurance and certification platform Tugboat Logic in September 2021, to automate its InfoSec assurance and certification processes. Other notable acquisitions include Privacy Core e-learning, DataGuidance, and Integris Software.
 
 
 In March 2023, OneTrust announced the 
 <a href="https://sp-edge.com/updates/16852">
 addition of certification automation
 </a>
 to the OneTrust GRC and Security Assurance Cloud. This solution which combines automation, pre-built policies and controls spanning 29 industry frameworks, over 100 integrations, compliance content, and expert guidance enables customers to simplify and streamline compliance tasks according to OneTrust.
 
 
 Key customers and partnerships
 
 
 OneTrust entered a partnership with Dow Jones Risk and Compliance in April 2023, to incorporate risk and compliance data into its third-party due diligence solution.&nbsp;&nbsp;
 
 
 Funding and financials
 
 
 The company employed 3,000 people, served more than 12,000 customers (including 75% of the Fortune Global 500 companies), and its solutions are backed by 200 patents, as of January 2022. In June 2022, OneTrust 
 <a href="https://sp-edge.com/updates/11018">
 laid off 950 employees
 </a>
 (~25% of its global workforce) across its departments in Atlanta (US), Bengaluru (India), and London (UK), due to worsening global financial crisis and to balance between growth and profitability.
 
 
 OneTrust&rsquo;s 
 <a href="https://sp-edge.com/updates/20390">
 most recent funding
 </a>
 was in July 2023, where it raised USD 150 million in a round led by Insight Partners at a valuation of USD 4.5 billion. The company expects to use the combined funding to scale its platform to meet increasing demand.&nbsp;
 
 
 This funding was raised at a lower valuation, down from the USD 5.1 billion OneTrust recorded during its December 2020 Series C round (USD 300 million), however the company reports it has doubled ARR to USD 400 million, grown customer numbers from 7,500 to over 14,000, and increased headcount from 1,500 to over 2,000 over the same period.
 
</div>

OneTrust

<div>
 
 Privitar provides a platform that enables companies to leverage personal data in their databases for analysis without compromising the end user&rsquo;s safety and privacy. The company&rsquo;s solutions handle and process data compliant with privacy regulations such as GDPR and CCPA.
 
 
 The company&rsquo;s platform provides de-identification solutions to enable the use of personal data while maintaining data utility. Use cases include business intelligence, insights, Anti-Money Laundering (AML) analysis, etc. The platform also includes features to manage secure data sharing and invisible data watermarks to track data movement throughout the organization.
 
 
 In July 2022, Privitar 
 <a href="https://sp-edge.com/updates/11586?industryIds=34">
 acquired
 </a>
 the UK-based regulatory intelligence platform Kormoon to use the latter&rsquo;s repository of data privacy rules across 46 jurisdictions and automate policies in its own data provisioning platform. The company deemed this repository as a &ldquo;strategic asset&rdquo;&mdash;something that would take it years to build on its own. Kormoon provides a regulatory intelligence platform that analyzes the data usage behavior of companies to determine and automate necessary actions to achieve compliance with privacy regulations such as the GDPR and CCPA. Privitar expects to launch Kormoon&rsquo;s regulatory intelligence to users of Privitar by the end of 2022, although it&rsquo;s unclear whether Kormoon&rsquo;s offerings will continue to be sold as a separate product in the long term.
 
 
 In June 2023, enterprise data management firm Informatica announced 
 <a href="https://sp-edge.com/updates/19444">
 it was in talks to acquire
 </a>
 Privitar.
 
 
 As of November 2020, Privitar employed over 200 staff and has offices in the UK, the US, Singapore, and Poland.
 
 
 Key customers and partnerships
 
 
 Privitar expanded the relationship it had with HSBC through its Series C fundraise, as HSBC was the first customer for Privitar in 2016. In addition to HSBC, Privitar also has other customer-turned-investors such as Citi.
 
 
 Funding and financials
 
 
 Privitar&rsquo;s most recent funding round was in June 2020, where it raised USD 7 million as a Series C investment led by HSBC Venture Capital Coverage Group. With USD 80 million raised in April 2020, its total Series C funding now amounts to USD 87 million. The company intended to use the funding to accelerate product development, hire additional staff, and focus on international expansion.
 
</div>

Privitar

<div>
 
 CENTRL provides automated risk management and privacy management solutions. Through its Privacy360 platform, the company provides solutions to identify compliance gaps, automate data discovery, manage data subject rights requests, consent management (with a user-facing preference center), carry out impact assessments, third-party risk management, monitoring, and reporting.
 
</div>

CENTRL

<div>
 
 HighSide provides a secure communications platform for organizations, enterprise archiving solutions, data discovery, and supervision tools in compliance with GDPR, CCPA, etc. In 2019, the company announced the acquisition of Hotshot Technologies, a secure team messaging platform.
 
</div>

HighSide

<div>
 
 SecuPI provides a patented platform enabling organizations to achieve compliance with regulations such as GDPR and CCPA. The platform achieves this by providing multiple features to protect data such as pseudonymization, consent controls, audit logs, streamlining breach notifications, etc. SecuPI’s platform is deployed in organizations in the banking, insurance, telecommunications, and health industries.
 
</div>

SecuPi

Uses AI/ML to automate workflows such as data discovery and data classification

Uses generative AI to provide conversational recommendations to users to remain compliant with privacy regulations

Solutions in this industry hub are offered under a B2B SaaS model

Tools to provide compliance with privacy regulations, such as GDPR and CCPA, and carry out tasks such as data discovery, data governance, consent management, Data Subject Rights (DSR) management, Data Protection Impact Assessments (DPIA) and managing incident response as mandated by these privacy regulations.

TerraTrue

Digital Privacy Tools

Key stats

Company Brief

Funding

Investors

About EDGE

Contact Us

Resources

Area of Focus

Technology Research Made Effortless