Compyl
Request Demo
Start here Platform Overview A guided, top-to-bottom tour of the entire GRC platform, one connected system, not point tools. Take the tour → 125+ connectorsIntegrationsConnect your cloud, identity, ticketing & security tools, evidence flows in automatically.Explore integrations →
Govern
Agent LibraryComing SoonSpecialized GRC agents.Policy ManagementCurrent, control-aligned policiesContract ManagementTrack every obligationAsset ManagementProtect critical assets
Comply & audit
ComplianceTest once, satisfy manyEvidence StudioAutomated, live evidenceTrust CenterShare your security postureUser Access ReviewsFast, accurate access reviews
Risk & third-party
Risk ManagementRisk in dollars, via FAIRThird Party InsightsObjective vendor risk in minutesVendor Risk ManagementManage third-party risk end to end
Compyl AI
Compyl AIAgentic AI across the platformCompyl CopilotAsk your GRC data anythingQuestionnaire AssistAI-drafted questionnaire answers
125+ integrations, connect your stackRequest a demo →
By industryIndustriesGRC tailored to the exact regulators and frameworks your industry answers to, one control library, mapped to all of them.Explore industries →
Financial ServicesSOX, GLBA, PCI, NYDFS, DORAHealthcareHIPAA, HITECH, PHI, BAAsLegalSOC 2, ISO 27001, OCG, privilege
InsuranceNAIC, GLBA, Model Audit RuleEnergy & UtilitiesNERC CIP, IEC 62443, TSAHigher EducationFERPA, GLBA, NIST 800-171
Six industries, mapped to your regulatorsRequest a demo →
One control library Every framework, mapped Map a single control to every framework it satisfies, test once, prove many. See all frameworks →
Popular
SOC 2ISO 27001HIPAAPCI DSS
Standards
GDPRNIST CSFNIST SP 800-53ISO 42001
More
CCPAMASNIS2
Compliance, automated, how Compyl maps controlsRequest a demo →
Latest Inside Compyl 26.2 AI-powered GRC, from risk to audit, what's new in the platform. Read the post →
Learn
All ResourcesBrowse the full GRC libraryGRC Learning CenterThe complete guide to GRCBlogInfoSec & compliance, trendingGuidesStep-by-step playbooksWebinarsLive & on-demand sessions
Watch & grow
Security SessionsOn-demand episodesCase StudiesResults from real teams
Network
Partner ProgramCompyl Accelerate Partner Program
Company Built by CISOs Our mission: make GRC adapt to how you work, not the other way around. About Compyl →
Company
About UsMission & teamCareersJoin the team
Trust
Our SecurityHow we protect youContact UsTalk to us
Company · About Compyl

GRC, built by the people who had to run it.

To redefine GRC by delivering flexible, powerful solutions that help organizations confidently manage risk and compliance with clarity and ease.

Request a demoSee the platform →
2020Founded by two former CISOs
70+Frameworks on one cross-mapped control library
125+Integrations built in-house, included
7G2 categories, Summer 2026 Mid-Market
Our mission

Make GRC adapt to how you work, not the other way around.

One platform for the whole GRC lifecycle, with agentic AI that removes the busywork and leaves your experts in control.

The Compyl team
The Compyl team — built by practitioners, for practitioners.
Our story

Founded by CISOs who lived the busywork.

Compyl was founded in 2020 by former CISOs Stas Bojoukha and Simon Shaddock, who experienced firsthand the frustration of managing security and compliance through disconnected point solutions. Organizations were left stitching together tools just to answer a basic question.

Built by practitioners for practitioners, Compyl delivers a modern, integrated GRC platform that replaces patchwork processes with clarity, automation, and confidence — helping organizations at any stage turn GRC into a strategic advantage.

“Are we secure?”The question that started Compyl · est. 2020
Stas Bojoukha
Stas BojoukhaCEO & Founder

Former CISO. Built Compyl to answer the question every board asks.

Simon Shaddock
Simon ShaddockCo-Founder

Former CISO. Designed the platform around how practitioners actually work.

Our values

What we stand for.

We build with integrity, think ahead, and stay focused on delivering real impact for the people who rely on us.

01

Built on integrity

Trust is at the center of any well-functioning team. We do what we say and hold ourselves to the standard we set for our customers.

02

We think ahead

GRC moves fast. We build for where risk and compliance are going — agentic AI, continuous monitoring, and one source of truth.

03

Real impact

We measure success by the time we give back to security teams and the confidence we put behind every decision they make.

The team

The people behind Compyl.

As our team continues to grow, we stay consistent with our mission and values.

Stas Bojoukha
Stas BojoukhaCEO & Founder
Simon Shaddock
Simon ShaddockCo-Founder
Daniel Tangney
Daniel TangneyHead of Marketing
Alex Salgado
Alex SalgadoVP of Engineering
Trust

We run the same program we sell.

Compyl is SOC 2 audited and monitored continuously on Compyl itself. Read how we secure the platform, or see what the teams who use it say on G2.

Recognized by users on G2 · Rated a leader by the teams who use itG2 Momentum Leader, Summer 2026G2 High Performer Mid-Market, Summer 2026G2 Best Support Mid-Market, Summer 2026G2 Fastest Implementation Mid-Market, Summer 2026
SOC 2
Type II audited, monitored on Compyl
Single-tenant
A dedicated environment per customer
125+
In-house integrations, included
7
G2 categories, Summer 2026
GRC your way

See Compyl on your own data.

One platform for the whole GRC lifecycle, with agentic AI that removes the busywork and leaves your experts in control.

Request a demoHow we secure Compyl →
Last reviewed September 2026 by the Compyl GRC team
By clicking “Accept”, you agree to the use of cookies on your device in accordance with our Privacy and Cookie policies
Accept