Scytale

Compliance work is where security programs go to rot: evidence collected by hand, control drift discovered at audit time, spreadsheets passed between engineers and auditors until nobody trusts the numbers. Scytale, founded in 2020, builds against that failure mode directly. Its AI-powered GRC platform automates evidence collection, continuous control monitoring, access reviews, vendor risk management, policy management, and audit preparation - the goal being to catch compliance drift before the auditor does, not after.

The scope is broad: the platform maps to 80+ security, privacy, and AI frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS. That means work touching automated control monitoring across heterogeneous stacks, evidence pipelines that have to survive audit scrutiny, access-review workflows, and third-party risk surfaces - with AI in the loop but humans still on the hook for the interpretation. The company pairs its automation with compliance experts, and it serves startups, scale-ups, and enterprises, including regulated verticals like healthcare and payments. Over 1,000 companies use it globally, with a strong EMEA presence; it holds G2 Leader status in GRC and was named 2025 Rising Star Partner of the Year (Technology) in EMEA by AWS.

Context on leadership and culture: Scytale was founded by Meiran Galis, who previously worked in technology risk at Ernst & Young. The stated engineering posture is continuous compliance rather than point-in-time audit scrambles, and the company frames its mission around eliminating manual, error-prone compliance work - keeping the AI where it adds leverage and the human expertise where the frameworks get legally and technically subtle.