Trustero

Trustero operates as a developer of an AI-powered Governance, Risk, and Compliance (GRC) automation platform, headquartered in Palo Alto, California. The company was established in 2020 by Phillip Liu, who currently serves as the CEO. Liu is a serial entrepreneur with a substantial background in software engineering and infrastructure. Before founding Trustero, he co-founded SignalFx, a cloud monitoring company acquired by Splunk for over $1 billion. His career also includes key roles at Facebook, where he was a software architect for its Infrastructure as a Service platform, and at Opsware (later acquired by HP). This deep experience in building and scaling complex software systems directly informs Trustero's approach to solving compliance challenges.

The company's primary business is providing a Compliance-as-a-Service (CaaS) platform that simplifies and automates the process of achieving and maintaining regulatory compliance. It serves businesses ranging from startups to large enterprises, specifically targeting security, compliance, audit teams, and Chief Information Security Officers (CISOs). Revenue is generated through a subscription model for its platform, with customized pricing based on an organization's specific requirements. Trustero has successfully raised a total of $18.3 million in funding across two rounds to support its growth and product development.

Trustero's platform utilizes a proprietary AI technology called the "Trust Graph" to deliver its services. This system automates time-intensive GRC tasks such as evidence collection and mapping, continuous control monitoring, and gap analysis between different compliance frameworks like SOC 2, ISO 27001, NIST, and HIPAA. Key features include an AI-powered engine that automatically validates evidence, a natural language interface for querying compliance status, and tools to streamline responses to security questionnaires. The platform integrates with clients' existing cloud services and tools like Jira and Slack to gather evidence, aiming to make companies audit-ready on a continuous basis rather than just during audit seasons. This approach is designed to significantly reduce the manual effort and costs associated with compliance management, with some clients reporting up to a 75% reduction in internal audit costs.

Keywords: GRC automation, compliance as a service, SOC 2 compliance, ISO 27001 certification, risk management platform, AI compliance, continuous compliance, security audit, evidence collection automation, Phillip Liu, Trust Graph, security questionnaire automation, compliance management software, regulatory technology, RegTech, third-party risk management, HIPAA compliance, NIST framework, PCI compliance, GRC intelligence