Compliance Startups funded by Y Combinator (YC) 2024

Deel is the all-in-one HR platform for global teams. It helps companies simplify every aspect of managing an international workforce, from culture and onboarding, to local payroll and compliance. Deel works for independent contractors and full-time employees in more than 150 countries, compliantly. And getting set up takes just a few minutes. For more information, visit Deel.com.

Checkr builds people infrastructure for the future of work. And we believe everyone should have a fair chance to work. That's why we've designed a faster—and fairer—way to screen job seekers. For more information on our mission and products, visit http://checkr.com.

Vanta was founded in 2018, in the wake of several high-profile data breaches that shook our collective faith in internet businesses. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. From our early days of automating security monitoring for compliance standards like SOC 2, HIPAA, and ISO 27001, to pioneering a brand-new market as the leading Trust Management Platform, our vision to restore trust in internet businesses by enabling companies to improve and prove their security remains unchanged. Now more than ever, making security continuous—not just a point-in-time check— is essential. Vanta is the leading Trust Management Platform that helps simplify and centralize security for organizations of all sizes. Over 4,000 companies including Autodesk, Chili Piper, Flo Health and Quora, rely on Vanta to build, maintain and demonstrate their trust—all in a way that's real-time and transparent. Recently named the #1 Leader in G2's Winter 2023 Grid® Reports for Security Compliance, Vanta debuted a number of new product innovations over the last year, including Access Reviews which automates the once-manual, time-consuming access reviews process and an enhanced Risk Management solution allowing companies to holistically understand, prioritize, and reduce risks within their company to build a stronger security approach and demonstrate compliance. Vanta was built on the idea that software can be used to do amazing things for the world—if we trust it to do so. And we can’t do it alone. Come join us!

We help fintech risk and AML compliance teams automate and strengthen routine customer due diligence tasks with LLMs. Our AI assistants slash cost-to-comply, improve risk detection and free up capacity for investigations that require human expertise and decision making. Fintechs and banks use us to automate workflows like running thorough due diligence on a legal entity, reviewing customer documents like registry extracts, proofs of address etc and remediating false positive alerts from their AML systems.

Pilot is an all-in-one people platform for fast-growing teams. We help companies with payroll, benefits and compliance of employees and contractors in over 100 countries, including in the US.

Want to apply AI to your IT Helpdesk queue? Risotto helps you grant software access, limit access/permission grants by time, serve knowledge, and get approvals from people like managers. All using natural language directly in chat (AKA "ChatOps") IT teams spend too much time manually provisioning software and answering the same question repeatedly. We help them improve resolution times, reduce SaaS spend, and enhance security with 24/7 automated software access and IT support. Check us out at: https://www.tryrisotto.com

Ascen is a back office platform and employer of record for staffing firms.

DianaHR is an AI-powered HR person for the 1.4 million SMBs with at least 10 employees. Today, SMB owners spend 10+ hours a week struggling with managing software, state compliance notices, benefits questions, onboarding, insurance, workers comp, 401k, etc. With DianaHR, a human-in-the-loop AI takes care of all that and delivers peace of mind.

Oneleet provides a full-coverage cybersecurity platform through which companies can build, manage, and monitor their cybersecurity management program. The company's core product offers a roadmap for companies to become secure and build trust with their partners. The founder behind Oneleet has spent the past 10+ years helping companies become more secure by performing penetration tests.

Numo is the new money company — built to be the global bank for the newly minted generation of highly ambitious digital workers in Asia, Africa, LATAM, and beyond. These contractors currently sit in the 95th percentile of earners in their country — but their financial infrastructure is unstable. It's fragmented across PEOs, gig marketplaces, and consumer remittance platforms. With their local currency weakening against the US Dollar, they need control on how and when to repatriate funds. They don't just need a remittance app. They need a bank. Numo provides international contractors with a US bank account — and instant, low-cost payment rails to move money home. This way they can hold funds in USD up to the second they need to spend it. We help international contractors get paid like a local, while banking globally.

Cinder was founded to help organizations foster safer online spaces for everyone. Our platform empowers companies from start-ups to enterprises with end-to-end capabilities to mitigate harm, investigate abuse, and produce trustworthy and reliable AI outcomes. Building your world-class company means keeping your users and community safe—Cinder unlocks faster growth by making safety easy. We work with customers in every industry from frontier AI labs to e-commerce and social media.

‍Fieldguide is an automation and collaboration platform for modern assurance and advisory firms that digitizes the end-to-end engagement workflow on a single platform. Built by former Big Four practitioners and experienced technology leaders, Fieldguide is trusted by top CPA firms to improve margins, win new business, and build stronger client relationships. Fieldguide is backed by top investors such as Bessemer, 8VC, Y Combinator, Elad Gil, Floodgate, AICPA/CPA.com, Justin Kan and more.

Greenlite builds AI agents for financial crime investigations. Fintechs and banks use Greenlite agents to automate workflows like suspicious activity investigations, entity due diligence and regulatory reporting.

Every time workers in a warehouse box an order, they reference a 100 page manual with instructions like where to put the shipping label. RetailReady replaces the instruction manual with a tablet application.

Kobalt has built an AI copilot to automate manual risk and compliance operations for fintechs and banks. Given a vendor contract, Kobalt’s reasoning engine ingests internal policies and procedures, legal commitments, past privacy and compliance assessments, and syncs with external legislation to instantly auto-surface and track risks. We're helping community/regional/sponsor banks increase revenue and scale their partnership and vendor volume, and we're helping fintechs conduct their partner diligence in 1/0 the time, all without needing to increase headcount.

Crew is the end-to-end AI powered HR platform for global teams. Find and hire the best pre-vetted global talent and simplify culture, onboarding, payroll, and compliance.

Flagright helps fintechs & banks monitor, screen, investigate, and report their transactions & customers against financial crime risks with a best-in-class AML compliance software. Catering to a diverse clientele across various financial sectors, we serve customers across 6 continents. Flagright is a pioneer in the application of generative AI for AML compliance operations with its AI suite, Flagright AI, delivering unmatched scalability and extreme performance. Our products are designed to help our customers scale volume without scaling headcount and grow faster.

Kodex makes it easy for companies to process, and respond to, subpoenas from governments around the world. Agencies, like the FBI, subpoena user data from customers like Coinbase, and thousands of other companies - without Kodex, companies largely rely on email, fax, and spreadsheets to manage them. Kodex is a SaaS tool that helps private sector companies manage relationships, workflows, and secure file transfer with government agencies who are seeking confidential information on a company's users. We streamline compliance operations, protect the privacy of their users, reduce error, and validate the legitimacy of government agents who are requesting information. To date, we have launched with Coinbase, Kik Messenger, Whisper App, & Amino Apps. These companies alone receive over 20,000 data requests per year.

FlowEQ is the trusted provider of workflow automation for teams that need to accelerate their work, especially complex processes and high-volume workflows that require human judgment. The FlowEQ Workflow Acceleration Platform includes interactive decision trees that are used by customer support, operations and product teams across all industries to improve accuracy and speed up important recurring work. Using FlowEQ customers get through high-stake recurring workflows 10x faster, saving their companies time and money every day. For additional information, visit www.floweq.com.

Confident LIMS is a leading Laboratory Information Management System (LIMS) serving high-throughput labs in regulated industries. Confident LIMS is a B2B Software-as-a-Service (SaaS) platform with strong network effects among our lab customers and their testing clients. We currently serve >60% of the legal cannabis industry in the United States and are expanding into mainstream agriculture, food & beverage, and environmental industries. In early 2022, we pivoted away from seeking to be the leading online B2B wholesale marketplace in the legal cannabis industry to be the best LIMS in the world in the agriculture, food & beverage, environmental and industrial chemicals industries.

Swif.ai is a modern AI-powered unified endpoint management platform. It simplifies device security and compliance for all devices across Windows, macOS, Linux, iOS, and Android systems. This allows for easy policy deployment and control in minutes. With autopilot enrollment, managing and enrolling new devices is made simpler. Furthermore, Swif automatically collects and sends asset inventory and compliance data to compliance automation platforms like Vanta, Drata, and other tools for continuous compliance and auditing.

Striga is building infrastructure for digital assets and financial services as a single set of APIs doing the heavy lifting of security and regulatory compliance. Striga's customers include early stage FinTech's, Web3 innovators, Banking Institutions and Crypto Exchanges utilizing services spanning the range of Crypto Custody, Trading, Card Issuing and Banking. Building a crypto business today is a highly regulated space unlike a few years ago and maintaining a compliance program and building technology presents a huge barrier to entry for startups and mid-size businesses alike and the Striga platform solves the problem with a single set of APIs and a single contract to deliver services to 30 countries today.

We have hundreds of fully qualified and experienced contractors in Information Security, Cloud Security, Privacy and Compliance available at competitive hourly rates.

Chart's Unified Tax Record API provides a direct bridge to tax records from the IRS, state tax agencies, and major tax preparation platforms such as TurboTax and H&R Block.

Teclada is a powerful web-based terminal built for teams and loved by developers. With Teclada, users can: ‣ Enjoy advanced features like visual autocomplete and AI integration - all in their browser ‣ Access their computers from anywhere ‣ Collaborate seamlessly with multiple users in real-time Teclada simplifies remote access by: ‣ Allowing multiple users to simultaneously view, edit, and execute commands by sharing terminals ‣ Transforming plain English into advanced command sequences quickly and accurately with AI-powered assistance ‣ Providing web-based access control with role-based permissions and sharing by email address, making access management secure and effortless Teclada works with any browser and is firewall-friendly, allowing for secure connections to remote computers even when they are behind firewalls or a NAT. Users can keep their sessions intact and uninterrupted, even if they disconnect or switch devices, with the ability to run multiple sessions at once, each with different layouts. Teclada is the future of remote access and collaboration, making it easier for teams to work together, no matter where they are.

Build safer platforms with Intrinsic. Get access to the best safety technologies from one unified API. Enable your Trust & Safety team to tell cohesive stories from policy to product, to enforcement. Michael and Karine first met two years ago at Apple’s Fraud Engineering, Algorithmic Risk team, which evolved to become Apple’s Trust & Safety function. We are both engineers and helped solve online abuse problems, including spam, botting, account security, and developer fraud for Apple’s customer base of over a billion users.

Hadrius allows regulated financial firms of all sizes to consolidate and automate their compliance processes using AI in one platform. Today, we're securing compliance for $200B+ AUM across our clients. We're building a world where the financial sphere is effortlessly superaligned with society and the regulatory guardrails it creates.

Affinity is a compliance training platform designed specifically for regulated industries. We’ve previously built a fintech from inception to a successful exit and are leveraging that experience to solve the learning management needs of regulated tech companies from growth stage to large enterprise banks.

Invopop helps global software companies comply with local tax reporting requirements. We offer an API that records every sale and reports it to the appropriate tax authority in the right format. In the last years, +15 countries have started to require businesses to report to tax authorities every sale, in real-time (e.g., India, Mexico, Brazil). This regulatory trend is catching up, as +20 countries will introduce this new regulation in the next 3 years (e.g., Germany, France, Australia, China). We help companies comply with this.

Skypher makes security reviews easy for software companies.

Warp is a modern payroll, compliance, and benefits platform built for founders. We put all state tax registrations and compliance on autopilot so you never need to login to another .gov website again. The last time you think about payroll and compliance will be the time you onboard to Warp.

Spear phishing simulation & security awareness training powered by AI.

With AI-powered attribution, security and engineering teams can find the best people to resolve vulnerabilities now.

Hazel sells AI-powered procurement software to the 19,000 state & local governments who procure $2T a year. Hazel uses LLMs to accelerate and improve a bidding process currently done with 20-year-old technology, bringing in more high-quality bidders and delivering better outcomes for government

Complying with HIPAA can cost companies tens of thousands of dollars and months of work. Delve automates HIPAA compliance, making it possible to get compliant in just days. The company provides an all-in-one compliance solution with (1) automated infrastructure, (2) a step-by-step checklist, and (3) real-time monitoring. By reducing compliance obstacles, Delve is making it easier to innovate in healthcare.

Shiboleth automates consumer lending compliance for financial institutions using AI. Banks like Cross River Bank use us to save months of manual work by automating audits and drafting reports for the governments. LLMs allow whole categories of manual compliance processes to be automated in ways that weren’t possible until recently. We are excited to automate back-office operations and enhance consumer protection in one of the most litigious industries.

Simplify your regulatory compliance. Sei's AI agents sit alongside your risk and compliance teams, amplifying impact and scale

Sarus solves the problem of accessing or sharing personal data for analytics or machine learning. The solution deploys natively in data infrastructures and lets practitioners work on data they cannot see. Every interaction with the sensitive data is protected with the highest privacy standard: differential privacy Sarus makes traditional anonymization methods irrelevant, saving months in compliance and data engineering while preserving all of the value of data.

Complif automates compliance processes for financial entities, including KYC/KYB, AML, risk profiling, documentation management and regulatory reporting.

Wolfia helps companies fill security questionnaires and RFPs 10x faster using generative AI. We do this by building a knowledge base using your existing policies and previously answered questionnaires with AI.

Craze makes it simple for founders and growing teams in India to manage, run and automate all of payroll, HR, IT and finance in one place. Our integrated system serves as the single source of truth for all of admin, from onboarding to offboarding and everything in between. With Craze, businesses in India: - Have a system of record for people, employee and entity data that automates onboarding and offboarding - Run payroll in one click - Ensure payroll compliance - Manage leaves, time and attendance seamlessly synced with payroll - Automate and manage expenses, devices, benefits and lots more Entrepreneurs start businesses to build something people want and change the world. Craze eliminates disjointed point solutions, multiple spreadsheets and coordination headaches and saves time, money and unnecessary stress so founders can focus on what matters most — growing their business.

Disclo is the first software for employers to collect, verify, and manage health disclosures and employee accommodation requests (HIPAA and SOC2 compliant, of course). We help employees secure the enhancements and protections they need to succeed in their careers without having to disclose their underlying medical condition to their employer. We handle the collection of that data, the verification, the secure data management, and much more. Using our patent-pending medical verification system, Disclo validates that an employee's accommodation request is legitimate and required, interacting with medical providers directly, so HR managers can focus on what they do best. We help companies stay compliant with EEOC, ADA, and HIPAA guidelines.

AiPrise allows fintech companies to integrate with multiple identity vendors through a single platform. Companies like Amal Invest use us to integrate with local vendors and comply with regulations in over 100 countries.

AccessOwl automates employee SaaS account provisioning and permissioning for any tool. IT teams from companies like Zeplin and Sary save 30 minutes on every request. Access management used to be an enterprise problem. With work from home, exploding SaaS usage and the need for SOC2 certifications startups have the same problems as enterprises. Mathias and Philip have built several startups and teams before and experienced the same problems around access management over and over again. Philip was the CEO and Co-Founder of blik, an award winning IoT solution that was used by Volkswagen and BMW. Mathias built the leading private payment infrastructure provider in Germany as well as the first digital car insurance as Co-Founder and CTO. Based on these experiences we decided to build a solution we wish we could have used when building our former companies. AccessOwl can be deployed within minutes instead of weeks by simply installing a Slack application. We save companies that use AccessOwl 30 minutes for every access request, on- and offboarding.

Stacksi helps companies automate the process of answering enterprise security questionnaires so they can close deals faster and save their best engineers’ time for more strategic projects. Salespeople, CTOs, and CEOs of fast-growing enterprise startups can upload security questionnaires into our system. If the company already has written security policies, they can upload those documents, too. From there, Stacksi parses their documents, identifies gaps in their security policies vs. standards, and helps them establish a successful security program. Ultimately, we will help them 1) automate completion of security questionnaires, 2) quickly get through enterprise security audits and 3) improve their security posture.