RiskSmart
RiskSmart is a Manchester-based SaaS company providing an AI-supported GRC platform with five modules (Risk, Policy, Compliance, Internal Audit, Third-Party Risk) to regulated UK mid-market and enterprise customers in financial services, energy, retail, and other sectors under a quote-based, unlimited-user subscription model.
- Company typePrivate
- Founded2022
- HeadquartersManchester, United Kingdom
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What RiskSmart does
RiskSmart is a UK-based software-as-a-service company that provides an integrated Governance, Risk, and Compliance (GRC) platform to regulated mid-market and enterprise customers. Founded in 2022 and headquartered in Manchester, the company delivers five core modules covering Risk Management, Policy Management, Compliance, Internal Audit, and Third-Party Risk Management, supported by workflow automation and AI-assisted capabilities in predictive analytics, knowledge retrieval, and risk scoring. Notable platform components include the RCSA (Risk and Control Self-Assessment) Wizard launched in October 2023, SCIM-based user provisioning and Slack/Microsoft Teams integrations released in August 2024, a Jira Cloud integration in February 2025, and a Policy Module enhancement in June 2025.
The company serves a diversified customer base of approximately 20 disclosed enterprise and mid-market logos spanning financial services (Allica Bank, Betfred, Funding Circle, Go Cardless, PensionBee, Pleo, Monavate, Redwood Bank, Cambridge & Counties Bank, Evlo, True Layer), energy (Octopus Energy, Smartest Energy), retail and consumer (JD Sports, Freemans Grattan Holdings, The Restaurant Group, Blue Light Card), property (Rightmove), legal (Simmons and Simmons), and insurance (Jensten). Pricing is delivered on a quote-based, unlimited-user subscription model with no per-seat fees, positioning RiskSmart as a cost-efficient alternative to incumbent per-seat GRC platforms. The go-to-market motion is primarily direct enterprise field sales supported by inbound demand generation, with a strategic GTM partnership with The Evolution Group (TEG) signed in April 2026 to accelerate pipeline.
RiskSmart has raised approximately $1.2M in disclosed seed funding from NPIF Maven Equity Finance in August 2022 and remains privately held and founder-led, with Ryan Swann as CEO/Founder, Richard Poole as CTO, and Matthew Rudd as Head of Product. The company holds UK Cyber Essentials Plus and ISO 27001 certifications, and operates with a headcount in the 11-50 range. Its G2 profile shows 100+ reviews and multiple badges including 5-star rating, Best Support, Easiest to Do Business With, Best Estimated ROI, Best Results, High Performer, Users Most Likely to Recommend, and Users Love Us.
RiskSmart firmographics
Firmographics- Name
- RiskSmart
- Legal name
- Risk Smart Limited
- Website
- https://risksmart.com
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- RiskSmart is a Manchester-based SaaS company providing an AI-supported GRC platform with five modules (Risk, Policy, Compliance, Internal Audit, Third-Party Risk) to regulated UK mid-market and enterprise customers in financial services, energy, retail, and other sectors under a quote-based, unlimited-user subscription model.
- Ownership category
- akta.pro rank
RiskSmart industry classification
Industry- Product category
- GRC (Governance, Risk, and Compliance) Software
- NAICS
- Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- GRC Platforms & Workflow Automation (HDADAIAA)
- akta.pro secondary industries
- Governance, Risk & Compliance (GRC) Platforms (BPAEAPAA), Enterprise AI Governance, Risk & Compliance Platforms (Model Risk, Audit, Policies) (HDAEANAE), Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL), Risk, Controls & Governance (GRC) Platforms (FSAFAOAG)
Keywords
Where RiskSmart is headquartered
LocationHeadquarters
- HQ city
- Manchester
- HQ country
- United Kingdom
- HQ region
- Europe
Markets served
RiskSmart business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription: RiskSmart operates on a subscription/SaaS model with unlimited user licensing at no extra cost, suggesting a per-organization pricing structure rather than per-seat pricing. The company emphasizes no hidden fees and no user fees, indicating a flat-rate subscription approach.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise SaaS subscription with unlimited user licensing |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels5 records
RiskSmart product offering
Product offeringCore offering
RiskSmart sells a cloud-based, AI-supported GRC (Governance, Risk, and Compliance) SaaS platform that centralizes risk, policy, compliance, internal audit, and third-party risk management into a single integrated system for small, mid-market, and enterprise organizations. The platform replaces spreadsheet-based GRC workflows with modular capabilities, a central dashboard, and AI-powered risk assessment, sold via annual subscriptions with unlimited user licensing and no per-seat fees.
Product overview
RiskSmart is a unified GRC (Governance, Risk, and Compliance) platform offered as a single integrated system with modular components. The core RiskSmart GRC Platform serves as the central hub, with five interconnected modules: Risk Module for risk identification, assessment, and monitoring; Policy Module for policy and document management; Compliance Module for regulatory compliance tracking; Internal Audit Module for audit workflow automation; and Third-Party Risk Module for vendor risk management. The platform is enhanced by AI-supported risk management capabilities providing predictive analytics, process automation, and knowledge retrieval. Additional capabilities include reporting and dashboards, incident management, and integrations with identity providers (Azure AD, LDAP, ADFS), communication tools (Slack, Teams), and project management (Jira Cloud). The RCSA Wizard and SCIM provisioning add specialized functionality for risk assessments and user management.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- Closes tasks 5x faster
- +3 more outcomes
Companies that use RiskSmart
Customer profileNamed customers20 records
Segments11 records
Ideal customer profiles3 records
RiskSmart technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability6 records
Feature3 records
RiskSmart partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core.
- The Evolution Group (TEG)coreThe Evolution Group (TEG) is a strategic GTM partner for RiskSmart, announced on April 22, 2026. The partnership enhances RiskSmart's market reach and distribution capabilities in the GRC space.
- Microsoft Azure Active DirectorycoreNative integration with Azure Active Directory for single sign-on (SSO) and identity management. Enables enterprise customers to leverage existing Microsoft identity infrastructure.
- Active Directory/LDAPcoreIntegration with on-premises Active Directory and LDAP directories for user authentication and identity management.
- ADFS (Active Directory Federation Services)coreIntegration with ADFS for federated identity management in enterprise environments.
- Google WorkspacecoreIntegration with Google Workspace for identity management and SSO capabilities for Google-based organizations.
Scale indicators5 records
Recent moves6 records
Expansion highlights5 records
RiskSmart competitors and assessment
Company assessmentDirect peers
- Diligent: Direct peer providing a unified governance, risk, and compliance platform to boards and executives across enterprise and mid-market segments. Highly comparable in GRC scope and buyer persona, though typically sold at a larger enterprise scale and with a heavier board/ERM focus.
- LogicGate: Risk Cloud platform offering no-code GRC workflow automation across risk, compliance, third-party risk, and audit. Closest direct competitor to RiskSmart on modular GRC, mid-market orientation, and workflow/configurability story.
- Vanta: Compliance automation platform that started in SOC 2/ISO 27001 and has expanded into broader GRC. Comparable on AI-driven automation, mid-market/SMB focus, and G2-style product-led growth, though with a US-centric customer base and stronger brand.
- Drata: Continuous compliance and GRC automation platform focused initially on SOC 2/ISO/HIPAA and extending into vendor risk and broader GRC. Comparable on automation, mid-market positioning, and G2 reputation trajectory.
Broad incumbents
- OneTrust: Broad trust intelligence platform with deep GRC, privacy, and ethics modules. Direct functional overlap in compliance, third-party risk, and policy management, but OneTrust operates at a much larger enterprise scale and with a wider product portfolio.
- ServiceNow Integrated Risk Management (IRM): Enterprise IRM/GRC suite embedded in the ServiceNow platform, competing for the same large-customer GRC budgets. Highly comparable on risk, compliance, audit, and third-party risk modules, but typically won by incumbents with much larger deployment footprints.
- RSA Archer: Long-standing enterprise GRC/IRM platform covering operational risk, regulatory compliance, audit, and third-party risk. The legacy GRC incumbent most often displaced in modernisation cycles — directly relevant to RiskSmart's wedge positioning.
- IBM OpenPages: Enterprise GRC platform from IBM covering operational risk, regulatory compliance, financial controls, and IT governance. Competes for the same large regulated-firm GRC RFPs and is a typical 'displacement target' for modern GRC vendors.
- SAP GRC: SAP's enterprise GRC and process control suite, deeply embedded in large SAP-shops. Comparable buyer base (large regulated enterprises), though typically sold as part of broader SAP estates rather than as a standalone best-of-breed platform.
Emerging players
- Centraleyes: Emerging GRC platform with a strong UK/European presence, focused on integrated risk management, compliance, and third-party risk. Closely comparable to RiskSmart in target market (UK mid-market, regulated industries) and product scope.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights6 records
Customer concentration
RiskSmart social profiles
Digital presenceRiskSmart compliance and trust
Trust signalCompliance1 record
RiskSmart financial estimates
Financial estimateRevenue estimate
Valuation estimate
RiskSmart leadership team
Management profileNumber of profiles
Profiles7 records
RiskSmart funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
RiskSmart M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about RiskSmart
What does RiskSmart do?
RiskSmart sells a cloud-based, AI-supported GRC (Governance, Risk, and Compliance) SaaS platform that centralizes risk, policy, compliance, internal audit, and third-party risk management into a single integrated system for small, mid-market, and enterprise organizations. The platform replaces spreadsheet-based GRC workflows with modular capabilities, a central dashboard, and AI-powered risk assessment, sold via annual subscriptions with unlimited user licensing and no per-seat fees.
Is RiskSmart a public or private company?
RiskSmart is a private company. It is classified as venture growth investor backed and is currently operating.
When was RiskSmart founded?
RiskSmart was founded in 2022. It employs 11 to 50 people.
Where is RiskSmart based?
RiskSmart is headquartered in Manchester, United Kingdom, in the Europe region.
How does RiskSmart make money?
One revenue line is on record: saaS Subscription.
Who are RiskSmart's main competitors?
Direct peers on record are Diligent, LogicGate, Vanta and Drata. Broad incumbents are OneTrust, ServiceNow Integrated Risk Management (IRM), RSA Archer, IBM OpenPages and SAP GRC. Centraleyes is listed as an emerging player.
Does RiskSmart have an API?
Yes. RiskSmart offers API-based integrations with third-party platforms. The CTO article mentions 'In addition to classic API integrations, SaaS companies across the board are moving to democratise integrations by making them user-led and secure.' Jira Cloud integration is mentioned as available via the RiskSmart + Jira integration page.
What industry is RiskSmart in?
RiskSmart's product category is GRC (Governance, Risk, and Compliance) Software. Its primary akta.pro industry code is HDADAIAA, GRC Platforms & Workflow Automation, with a secondary code of BPAEAPAA, Governance, Risk & Compliance (GRC) Platforms. Its NAICS code is 513210 and its SIC code is 7372.