Compliance Startups funded by Y Combinator (YC) 2025

Checkr builds people infrastructure for the future of work. And we believe everyone should have a fair chance to work. That's why we've designed a faster—and fairer—way to screen job seekers. For more information on our mission and products, visit https://checkr.com.

Enterprises are racing to adopt AI, but often don't have the right controls in place or know how to verify vendors are compliant. LogosGuard turns AI policies into executable controls, stress-tests your AI products, and continuously monitors changes, giving enterprises the confidence to scale AI responsibly.

We’re building AI agents that speed up drug trials by automating the manual consolidation and document prep required for every IND submission. Today, biotechs spend months stitching together reports from contractors and internal teams just to file and get to their first-in-human trial.

Automate internal auditing (planning, testing, documenting) to comply better with financial regulations. Denki performs audit work with 99% software, 1% services: ✔️ Works on existing systems (e.g. Auditboard, Workiva, ERPs) ✔️ Automates Control processes (e.g. collects evidence, runs walkthrough interviews, tests) ✔️ Records every step for traceability (workpapers w/ full audit trace) Focused on SOX programs and financial regulations (SEC Rules etc.)

Automated hardware certification and testing. Reduce your team's compliance hours by 50x. Currently supporting FCC, ISED, CE, ASTM F963.

Probo acts like your compliance team. You tell us how you work, and Probo does the rest: 1. Set the right requirements - not overkill 2. Handle docs, risks, controls, evidence 3. Run the audit 4. Keep everything up to date afterward Founders shouldn’t lose weeks to this stuff. Even one day is too much.

Cotool is an agentic security platform that eliminates manual and repetitive work for security teams. Today’s cybersecurity teams remain bogged down by alert fatigue, context switching, and documentation overhead. Security teams don't need more dashboards with "AI-powered insights" — they need their time back. Cotool empowers teams to build security their way. Our platform provides an AI co-pilot that automatically assembles context across tools, a no-code agent builder that transforms successful investigations into reusable automations, and automated report generation, providing comprehensive documentation in seconds. Unlike solutions that force teams to adapt to vendor workflows, Cotool puts the power of AI directly in practitioners' hands, letting them shape tools around their unique processes. Early users have already cut time spent on investigation and detection engineering by 70%.

Adentris is an AI compliance copilot for hospitals and clinics. We are like Grammarly for doctors, finding and fixing mistakes that lead to denied insurance claims or patient lawsuits. The industry today spends $40B doing this manually.

Tire Swing uses AI to power resident and applicant eligibility evaluations for affordable housing. Our software manages the resident certification and recertification process end-to-end for public and private properties supported by Project Based Rental Assistance, Low Income Housing Tax Credit, and Housing Vouchers. It serves as a drop-in replacement for third-party consultants and auditors, and helps compliance staff complete their work faster and more accurately.

Cardamon is an AI powered platform that ingests relevant regulation, understands what applies to each regulated financial firm, and gets compliance officers from regulation, to obligations, to product requirements in minutes - not weeks. Financial firms face a host of complex regulations that make it incredibly painful to launch and maintain products in a compliant way. As a Product team at Revolut, we felt this pain deeply ourselves - we had products ready to launch but stuck in compliance limbo, often for weeks. Turns out, getting compliant took as long as building the product itself. Frustrated, we dug in and were shocked by how manual and inefficient the processes were. That’s when it clicked: there’s a huge opportunity to automate the boring stuff (and solve our own problem!). Compliance teams win because they ditch the tedious tasks. Product teams win because they ship faster. Everyone’s happy.

Infinite is a stablecoin payment processor. We offer businesses turnkey APIs and SDKs to instantly move money anywhere in the world at a fraction of the cost of traditional solutions.

Trava is building AI agents for global trade compliance. Importers lose billions each year to duty overpayments and filing errors. Trava audits customs entries and automates classification to help importers protect margins and stay compliant at scale.

Archon helps software companies sell to the government by cutting the required federal compliance timeline (called FedRAMP) down from 16 to 6 months and cuts costs by $1M per company. Email us at inquiries@archon.inc

Platus delivers fast, reliable legal infrastructure with a no-code platform and API, designed to support SMBs with instant access to notarization, legal drafting, e-signing, and workflow automations. Our solution removes the high costs and slow processing of traditional legal services, by empowering businesses to seamlessly manage compliance and legal tasks.

Galini guardrails-as-a-service filter harmful inputs and outputs based on company policies and industry regulations. We make it easy for enterprises to create, test, deploy and refine guardrails. With Galini, product and engineering leaders enjoy peace of mind knowing their AI apps are compliant at run-time, and save $1-10M in costs from avoiding in-house build

We build AI compliance for external marketing. For example, we work with major creators to ensure that their content meets credit card marketing guidelines.

Firstwork is a next-generation HR platform designed specifically for companies with dynamic workforce needs. Our mission is to streamline and automate key HR processes to help businesses operate more efficiently and effectively. What We Do (for now): (1) Smart Onboarding 📋: Our platform simplifies the onboarding process by automating the collection and verification of credentials, such as right-to-work documents, insurance forms and driver’s licenses. This reduces administrative burden and accelerates the time-to-productivity for new hires. (2) AI-Assisted Activation 🤖: Leveraging AI, we enhance communication and messaging for new hires, ensuring they receive timely and relevant information. This helps in better engagement and faster integration into their roles. (3) Perpetual Compliance ✅: Our system uses AI and OCR technology to continuously monitor and ensure compliance with various regulatory requirements. This includes tracking expirations of critical documents, updating records, and generating compliance reports, thus reducing the risk of penalties and legal issues.

Banks and fintechs have large teams of human analysts who conduct manual checks and reviews. We replace those human compliance analysts with AI agents that automate 80% of the manual work for faster and more compliant financial crime (AML) reviews. Our first three products are: Screening AI (discount 91% of screening alerts), KYB/C AI (speed up onboarding), Transaction Monitoring AI (handle AML transaction monitoring alerts) Our end goal is to have a whole suite of AI workers that can handle manual compliance work for banks and fintechs. A $24B opportunity in the US alone.

Saphira is the easiest way for hardware products to get safety certified and reach market faster, such as industrial robots and heavy machinery.

Want to apply AI to your IT Helpdesk queue? Risotto helps you grant software access, limit access/permission grants by time, serve knowledge, and get approvals from people like managers. All using natural language directly in chat (AKA "ChatOps") IT teams spend too much time manually provisioning software and answering the same question repeatedly. We help them improve resolution times, reduce SaaS spend, and enhance security with 24/7 automated software access and IT support. Check us out at: https://www.tryrisotto.com

We help fintech risk and AML compliance teams automate and strengthen routine customer due diligence tasks with LLMs. Our AI assistants slash cost-to-comply, improve risk detection and free up capacity for investigations that require human expertise and decision making. Fintechs and banks use us to automate workflows like running thorough due diligence on a legal entity, reviewing customer documents like registry extracts, proofs of address etc and remediating false positive alerts from their AML systems.

DianaHR is an AI-powered HR person for the 1.4 million SMBs with at least 10 employees. Today, SMB owners spend 10+ hours a week struggling with managing software, state compliance notices, benefits questions, onboarding, insurance, workers comp, 401k, etc. With DianaHR, a human-in-the-loop AI takes care of all that and delivers peace of mind.

ROE AI solve risks and compliance problems for financial industry.

Every time workers in a warehouse box an order, they reference a 100 page manual with instructions like where to put the shipping label. RetailReady replaces the instruction manual with a tablet application.

Delve helps fast-growing teams get compliant with an AI-automated platform. Serving hundreds of companies on frameworks like SOC 2, HIPAA, ISO 27001, GDPR, PCI DSS, and more.

Affinity is a compliance training platform designed specifically for regulated industries. We’ve previously built a fintech from inception to a successful exit and are leveraging that experience to solve the learning management needs of regulated tech companies from growth stage to large enterprise banks.

Greenlite is the leading AI agent platform for compliance in financial services. Regulated banks and fintechs — including those overseen by the OCC, FDIC, and SEC — trust Greenlite to automate mission-critical work like sanction reviews and anti-money laundering investigations with speed and accuracy.

SafetyKit's AI agents do the dirty work for big tech and finance companies so humans don't have to. Today companies rely on armies of low-paid outsourced humans to protect their platforms from fraud, harassment, and crime. It’s super important work, but the jobs are difficult and sometimes traumatizing, and it’s impossible to keep up. Our mission is to end this manual toil. We learned this domain first-hand at Stripe and Airbnb, where first we built software for human reviewers, and then built models to replace them. We’re a group of engineers from Stripe, Meta, Netflix, MIT, and Princeton that love language models and unironically love B2B SaaS. We know the economy is going to be rearranged over the next 4 years and we want to be in the driver’s seat. We build vertical AI that works and have some of the world’s largest companies as paying customers. Patreon, Eventbrite, Upwork, Character.ai, Substack, Faire, along with a $10B+ marketplace, a $100B+ payments company, and more rely on SafetyKit in production.

Dili (YC S23) is building the most reliable AI automation for compliance in real-world industries. Across energy, infrastructure, datacenters, advanced manufacturing, and construction, Dili has run prevailing wage, apprenticeship, & other labor compliance to help customers secure over $1 billion in federal funding. Dili is building the AI system of record to help physical industries track compliance, analyze labor and spend, run payroll, and more.

Compare models and outputs without random noise skewing your results. Verifiable AI. Store input + seed + output for audits, compliance, and reproducibility. https://www.logital.ai/ https://www.teclada.com/

Ekho's end-to-end vehicle commerce platform powers compliant, digital sales of titled vehicles. Our platform handles checkout, financing, titling, registration, signature collection, and taxes—so dealers and OEMs can sell nationwide with a seamless, Tesla-like experience. Dealers use Ekho Dealer as a “dealership-in-a-box” to capture online sales and automate in-store deals without needing large back-office teams, while OEMs use Ekho Access and Omni to extend their reach and unify dealers across sales channels.

Build safer platforms with Intrinsic. Get access to the best safety technologies from one unified API. Enable your Trust & Safety team to tell cohesive stories from policy to product, to enforcement. Michael and Karine first met two years ago at Apple’s Fraud Engineering, Algorithmic Risk team, which evolved to become Apple’s Trust & Safety function. We are both engineers and helped solve online abuse problems, including spam, botting, account security, and developer fraud for Apple’s customer base of over a billion users.

Finic helps fintechs and banks automate the detection and investigation of financial crimes. We automate human jobs-to-be-done for: - Fraud operations teams - AML/BSA teams - Compliance teams - Credit risk teams While our approach is agentic, we use AI only where it's better than the alternative. Our vertical focus allows us to be more accurate and efficient than horizontal agent companies on the same task.

Adri is built for enterprises that are buying AI. Our patented software monitors the AI vendor's infrastructure and detects any intentional or accidental misuse of your proprietary data. We help you buy AI that you can trust.

We’re building an API for launching credit products. We enable companies to compliantly offer credit by handling the tech stack for origination, underwriting and loan management with just a few lines of code. We have built-in compliance guardrails to ensure that our customers comply with state and federal regulations and assist with licensing requirements and license management.

Invopop helps global companies like SumUp, Fever, and DeepL manage electronic invoicing across more than 25 countries through a single API. In the next five years, over 40 countries—including all EU member states—will require businesses to issue invoices electronically and report them in real-time to tax authorities. Instead of building and maintaining numerous local integrations, global companies can integrate just once with Invopop, streamlining compliance and saving time.

Hadrius allows regulated financial firms of all sizes to consolidate and automate their compliance processes using AI in one platform. Today, we're securing compliance for $3T+ AUM across our clients. We're building the AI that will regulate the US financial system and the trillions that flows through it.

Coris is building the AI layer for payments risk and operations. We work with the most ambitious platforms, marketplaces, and payment providers around the globe such as GoFundMe, Kajabi, Clio and Cherry to automate and accelerate merchant onboarding, monitoring, and decision-making. What risk teams only imagined two years ago, Coris is delivering today with our risk platform and AI agents. We’re backed by Y Combinator, Lux Capital, Pathlight Ventures, and other world-class investors — and we’re just getting started !

Craze makes it simple for founders and growing teams in India to manage, run and automate all of payroll, HR and IT in one place. Our integrated system serves as the single source of truth for all of admin, from onboarding to offboarding and everything in between. With Craze, businesses in India: - Have a system of record for people, employee and entity data that automates onboarding and offboarding - Run payroll in one click - Ensure payroll compliance - Manage leaves, time and attendance seamlessly synced with payroll - Automate and manage expenses, devices, benefits and lots more Entrepreneurs start businesses to build something people want and change the world. Craze eliminates disjointed point solutions, multiple spreadsheets and coordination headaches and saves time, money and unnecessary stress so founders can focus on what matters most — growing their business.

Oneleet helps companies become secure and compliant through an all-in-one solution that combines automated tools and human expertise. Oneleet has built the second generation of security compliance automation software, providing tools that go beyond what is classically provided for just compliance alone. Tools like a code security scanner, attack-surface management, access reviews and trust portal are all built in. As the most popular, highest rated and most frequently used platform in the YC community, Oneleet has quickly established itself as the preferred and superior alternative to other incumbents. The founder behind Oneleet has spent the past 10+ years helping companies become more secure by performing penetration tests.

Verify your customers globally with a single platform. Get 800+ data points on each business and 100+ data points on each individual and onboard with confidence.

AccessOwl automates employee SaaS account provisioning and permissioning for any tool. IT teams from companies like Zeplin and Sary save 30 minutes on every request. Access management used to be an enterprise problem. With work from home, exploding SaaS usage and the need for SOC2 certifications startups have the same problems as enterprises. Mathias and Philip have built several startups and teams before and experienced the same problems around access management over and over again. Philip was the CEO and Co-Founder of blik, an award winning IoT solution that was used by Volkswagen and BMW. Mathias built the leading private payment infrastructure provider in Germany as well as the first digital car insurance as Co-Founder and CTO. Based on these experiences we decided to build a solution we wish we could have used when building our former companies. AccessOwl can be deployed within minutes instead of weeks by simply installing a Slack application. We save companies that use AccessOwl 30 minutes for every access request, on- and offboarding.

Disclo is the first software for employers to collect, verify, and manage health disclosures and employee accommodation requests (HIPAA and SOC2 compliant, of course). We help employees secure the enhancements and protections they need to succeed in their careers without having to disclose their underlying medical condition to their employer. We handle the collection of that data, the verification, the secure data management, and much more. Using our patent-pending medical verification system, Disclo validates that an employee's accommodation request is legitimate and required, interacting with medical providers directly, so HR managers can focus on what they do best. We help companies stay compliant with EEOC, ADA, and HIPAA guidelines.

From content moderation to responsible AI, Cinder empowers businesses to orchestrate and automate digital safety at scale. Cinder was founded to help organizations foster safe online spaces for everyone. Our platform empowers companies from start-ups to enterprises with end-to-end capabilities to mitigate harm, investigate abuse, and produce trustworthy and reliable AI outcomes. Building your world-class company means keeping your users and community safe—Cinder unlocks faster growth by making safety easy. We work with customers in every industry from frontier AI labs to e-commerce and social media.

Postal offers a modern virtual mailbox for businesses. Postal provides an official address for government, IRS, and vendor communications so companies don't have to use an apartment / shared office address. Postal's AI summarizes mail and recommends compliance actions, and its marketplace of service providers are ready to perform the mundane compliance work that otherwise falls through the cracks. Companies get 6 months free (a $300 value), plus three free hours of compliance services (a $600 value).

Sei is an AI platform for CX and Compliance teams. Simplify your customer support & collections workflows with a compliant AI

Flagright helps fintechs & banks monitor, screen, investigate, and report their transactions & customers against financial crime risks with a best-in-class AML compliance software. Catering to a diverse clientele across various financial sectors, we serve customers across 6 continents. Flagright is a pioneer in the application of generative AI for AML compliance operations with its AI suite, Flagright AI, delivering unmatched scalability and extreme performance. Our products are designed to help our customers scale volume without scaling headcount and grow faster.

Agency specializes in multi-party security and compliance scenarios; we are the Palantir of compliance. We serve the most innovative companies and their teams working on critical challenges and transformative technologies by helping them achieve standards like SOC2, ISO 27001, CMMC, NIST, HIPAA, and GDPR that meet the highest levels of scrutiny from third parties. Our patented platform, Verse, integrates with GRC software like Vanta, cloud infrastructure, and your endpoints to securely handle complex multi-layered configurations, such as remote contractor use, BYODs, and federated client-hosted application deployments. Our managed security and compliance team helps high-growth software companies meet rigorous standards as quickly as possible by doing it for them. Our ETDR program enables organizations to prevent threats directly targeting their employees' personal devices, data, and online accounts while respecting their privacy. We provide customized solutions to prevent insider threats, data loss prevention, and threat intelligence while safeguarding personal privacy.

Complif automates compliance processes for financial entities, including KYC/KYB, AML, risk profiling, documentation management and regulatory reporting.

Feroot (YC W21) is the leading compliance and security platform for b2b websites that helps you easily achieve and maintain compliance with PCI DSS 4.0.1, CCPA, CIPA, HIPAA and 50+ data privacy regulations.