Third Prime is a leading New York and Nashville based early-stage venture capital firm, with over $500mm assets under management.

Third Prime

Bain Capital Ventures invests in seed to growth-stage startups that are using tech to disrupt existing markets or create entirely new ones.  The firm invests from seed to growth in enterprise software, infrastructure software, and industries being transformed by data.  Bain Capital Ventures has helped launch and commercialize 200-plus companies since 2000, including investments in DocuSign, Jet.com, Kiva Systems, LinkedIn, Rapid7, SurveyMonkey, Taleo, and TellApart. Bain Capital Ventures has more than $5.2 billion of assets under management with offices in San Francisco, New York, and Boston.

Bain Capital Ventures

Nyca Partners is a venture capital and advisory firm that focuses on the fintech sector. The firm connects innovative companies to financial institutions and technology companies as well as expert individuals as investors and advisors. Nyca Partners was founded in 2014 and is headquartered in New York, United States.

Nyca Partners

Canapi Ventures transforms financial services with API driven technology through strategic investments and partnerships. Canapi Ventures invests in early to growth-stage fintech companies, offering disruptive alternatives to outdated business models and technologies. Backed by the United States’ regulatory experts and financial institutions, Canapi Ventures delivers capital, customers, and guidance to founders building the digital financial services ecosystem of the future. Canapi Ventures was founded on 2018 and is based in Wilmington, North Carolina.

Canapi Ventures

Backing the next wave of category-defining FinTech founders and companies.

Dash Fund

J.P. Morgan Growth Equity Partners is the technology focused late-stage venture and growth equity investment arm within J.P Morgan Private Capital.

J.P. Morgan Growth Equity Partners

PayPal Ventures is PayPal's venture capital arm, investing in PayPal's strategic interest fields for return. Leveraging PayPal Venture's expertise and experience, PayPal – and the companies in which it invests – are helping to bring innovative solutions to market more quickly, scale them faster, and build a global financial system that is more transparent, personalized, inclusive, and customer-focused. PayPal Venture's investments reinforce its commitment to leading the financial technology industry and supporting entrepreneurship.

PayPal Ventures

Founded in 2018, Fin Capital is a global asset manager focused on full lifecycle investing in B2B Fintech Software companies. Fin Capital is passionate about rolling up its sleeves and partnering with repeat entrepreneurs that have deep financial services experience, differentiated products, and a global mindset. Fin is headquartered in San Francisco, with offices in Los Angeles, London, Miami, and New York. To learn more, visit www.fin.capital.

Fin Capital

Centana Growth Partners is a private equity firm focused on providing growth equity and venture capital to companies in the financial services ecosystem. The firm’s partners bring decades of investing and operating experience, built on the backbone of specialized knowledge and deep domain expertise in our sectors. Over time our team has developed an extensive network with leading players and institutions in the industry, providing our companies the opportunity to accelerate growth and take their businesses to the next stage.

Centana Growth Partners

Thoropass

At Thoropass, we’re compliance experts so you don’t have to be. Pairing easy software that’s always getting smarter with expert guidance and continuous monitoring, we integrate into your process to prepare you to pass any audit, every year, with flying colors. Hundreds of growing companies use Thoropass’s compliance automation platform, expert services, auditors and partner ecosystem to get and stay compliant over the lifetime of their business. We offer SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, and other infosec and privacy frameworks. Learn more at www.thoropass.com.

Founded in 2019 as Laika, Thoropass provides a platform for businesses to implement compliance practices that meet regulatory requirements such as the GDPR and CCPA. The platform unifies customizable automated information security (InfoSec) workflows, security audits, risk assessment, monitoring, and vendor due diligence solutions. Thoropass also supports companies by providing them with dedicated on-call compliance architects and a customer service manager to guide them through the compliance processes and attain security certifications.

New data privacy regulations have opened up space for a new wave of compliance-focused startups.

Digital Privacy Tools

Thoropass becomes the first infosec compliance solution to achieve ISO 42001 certification, ensuring responsible AI use

Founded in 2019 as Laika, Thoropass provides a platform for businesses to implement compliance practices that meet regulatory requirements such as the GDPR and CCPA. The platform unifies customizable automated information security (InfoSec) workflows, security audits, risk assessment, monitoring, and vendor due diligence solutions. Thoropass also supports companies by providing them with dedicated on-call compliance architects and a customer service manager to guide them through the compliance processes and attain security certifications.The platform has pre-built integrations such as AWS, GitHub, and Datadog for evidence gathering that verifies whether a company has adapted InfoSec and privacy policies. The company has trained more than 3,000 employees in security certification courses and offers its platform under a software-as-a-service (SaaS) monthly subscription model.Key customers and partnershipsAs of September 2024, Thoropass counted 50+ of the Fortune 500 among its customer base. Notable customers included Peach, PactFi, SteadyMD, Finsync, Kado, Nord Security, and Benefix.

OneTrust provides compliance solutions that leverage AI tools and automation across all areas of privacy compliance. The company’s AI-powered solution sees widespread use, providing automation in the areas of data discovery, data subject rights management, consent management (with a user-facing preference center for greater control), data protection impact assessments, third-party risk management, incident response reporting, and monitoring.The company also provides regulatory research software that companies can use to train staff and even benchmark their own privacy programs. The company’s Government Records Request Automation solution helps government organizations intake requests, automate data discovery and redaction, and provide a secure two-way communication portal that demonstrates compliance with FOIA, PRR, and the Privacy Act. OneTrust’s products were backed by over 200 patents as of September 2024.OneTrust has strengthened its position in the digital privacy space through several acquisitions in recent years. In March 2021, OneTrust acquired DocuVision, an AI-powered data redaction platform to bolster its data subject rights capabilities through automatic redaction of non-relevant sensitive information. During the same month, OneTrust acquired Convercent to enhance its platform through advanced ethics and compliance capabilities, and helpline and disclosure management. OneTrust acquired the security assurance and certification platform Tugboat Logic in September 2021, to automate its InfoSec assurance and certification processes. Other notable acquisitions include Privacy Core e-learning, DataGuidance, and Integris Software.In March 2023, OneTrust announced the addition of certification automation to the OneTrust GRC and Security Assurance Cloud. This solution which combines automation, pre-built policies and controls spanning 29 industry frameworks, over 100 integrations, compliance content, and expert guidance enables customers to simplify and streamline compliance tasks according to OneTrust.Key customers and partnershipsAs of September 2024, OneTrust said it served over 14,000 active customers, including 75 of the Fortune 100. The company claims it serves notable organizations from all industries, with Adobe, Walgreens, Samsung, and Mearsk among its customer base.OneTrust entered a partnership with Dow Jones Risk and Compliance in April 2023, to incorporate risk and compliance data into its third-party due diligence solution.

OneTrust

CENTRL provides automated risk management and privacy management solutions. Through its Privacy360 platform, the company provides solutions to identify compliance gaps, automate data discovery, manage data subject rights requests, consent management (with a user-facing preference center), carry out impact assessments, third-party risk management, monitoring, and reporting.

CENTRL

HighSide provides a secure communications platform for organizations, enterprise archiving solutions, data discovery, and supervision tools in compliance with GDPR, CCPA, etc. In 2019, the company announced the acquisition of Hotshot Technologies, a secure team messaging platform.

HighSide

SecuPI provides a patented platform enabling organizations to achieve compliance with regulations such as GDPR and CCPA. The platform achieves this by providing multiple features to protect data such as pseudonymization, consent controls, audit logs, streamlining breach notifications, etc. SecuPI’s platform is deployed in organizations in the banking, insurance, telecommunications, and health industries.

SecuPi

JoinPrivacy is a B2C solution that allows users to manage their personal data from the websites they use, all from one place.

JoinPrivacy

Solutions to prevent the tracking and collection of the personal data of end-users.

Encrypted communications and data exchanges for internal and external collaboration around sensitive data.

Tools to provide compliance with privacy regulations, such as GDPR and CCPA, and carry out tasks such as data discovery, data governance, consent management, Data Subject Rights (DSR) management, Data Protection Impact Assessments (DPIA) and managing incident response as mandated by these privacy regulations.

Synthetic data generation, data de-identification and anonymization, and other solutions for managing sensitive data.

Storage infrastructure for holding data in compliance with regulations such as GDPR or data residency requirements.

Central management of data access and data privacy and security policies.

Uses AI/ML to automate workflows such as data discovery and data classification

Uses generative AI to provide conversational recommendations to users to remain compliant with privacy regulations

Solutions in this industry hub are offered under a B2B SaaS model

Thoropass

About EDGE

Contact Us

Resources

Area of Focus

Technology Research Made Effortless