Tenacy
Tenacy is a Lyon-based SaaS cybersecurity GRC platform, founded in 2021, that helps large multi-entity organizations centralize governance, automate multi-framework compliance (ISO 27001, NIS 2, DORA, SOC 2), and streamline risk reporting for CISOs across 200+ customers in 32 countries.
- Company typePrivate
- Founded2021
- HeadquartersLyon, France
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Tenacy does
Tenacy is a Lyon, France-based SaaS company founded in 2021 that provides a cybersecurity-focused GRC (Governance, Risk, and Compliance) platform for complex multi-entity organizations. The platform centralizes cybersecurity activities across business units and subsidiaries, automates workflows, and produces multi-framework compliance and risk reporting. It maps 50+ compliance frameworks — including ISO 27001, NIS 2, DORA, SOC 2, HIPAA, and PCI DSS — and provides native connectors to 20+ security, ITSM, and IAM tools (CrowdStrike, SentinelOne, Qualys, Microsoft Defender, AWS Security Hub, Jira, PingCastle) to automate evidence collection and synchronize with existing technical stacks. Functional capabilities span multi-entity governance, multi-compliance management, real-time risk analysis and treatment planning, supplier management, and business-oriented reporting for executive leadership (COMEX/CODIR), with cited outcomes including 12 weeks/year saved on reporting consolidation and 53 perimeters managed by 2 administrators (Tessi case study).
Tenacy operates a subscription-based SaaS revenue model sold primarily through direct enterprise sales with a quote-based pricing structure, supported by a self-serve portal (app.tenacy.io) and a partner/reseller program. Its target customers are CISOs, RSSIs, and security leaders at large organizations managing multiple entities, subsidiaries, or geographies, with named enterprise customers spanning defense (Thales), energy (EDF, Sarpi Veolia), retail (Leroy Merlin, Kiabi, L'Occitane, Dubreuil), construction (Bouygues Construction), multiservices (Onet), insurance (Groupe Henner), aeronautics (Air Caraïbes), e-commerce (Asendia), business services (Tessi), pharmaceutical (Boiron), engineering (Artelia), cybersecurity services (Optven), and government (Conseil Départemental de Haute-Garonne). The company serves 200+ organizations across 32 countries.
The company has raised €8.5 million in total disclosed funding (€2.5M seed in March 2022, €6M in December 2023 led by Axeleo Capital) and targets €10-15M ARR within three years. Its go-to-market emphasizes thought-leadership content, RSSI/DSI community engagement via CESIN sponsorship (2025-2026), detailed enterprise case studies, and event-driven demand generation. Its core moat rests on regulatory coverage breadth, deep workflow integration that raises switching costs, and a benchmarking dataset built across 200+ organizations. The company has 11-50 employees and is led by CEO Cyril Guillet.
Tenacy firmographics
Firmographics- Name
- Tenacy
- Legal name
- Tenacy
- Website
- https://tenacy.io
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Tenacy is a Lyon-based SaaS cybersecurity GRC platform, founded in 2021, that helps large multi-entity organizations centralize governance, automate multi-framework compliance (ISO 27001, NIS 2, DORA, SOC 2), and streamline risk reporting for CISOs across 200+ customers in 32 countries.
- Ownership category
- akta.pro rank
Tenacy industry classification
Industry- Product category
- Cybersecurity GRC (Governance, Risk, and Compliance) Software
- akta.pro primary industry
- Governance, Controls & Policy Automation (GRC for Web3) (FSAPAJAG)
- akta.pro secondary industry
- Risk Management, Controls, Governance & Policy (Crypto) (FSADALAJ)
Keywords
Where Tenacy is headquartered
LocationHeadquarters
- HQ city
- Lyon
- HQ country
- France
- HQ region
- Europe
Offices1 record
Markets served
Tenacy business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- SaaS Subscription: Tenacy operates as a SaaS cybersecurity platform offering subscription-based access to its GRC platform. The platform is sold to enterprise customers through direct sales with demo requests and self-serve onboarding through app.tenacy.io.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise SaaS subscription with custom pricing |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
Tenacy product offering
Product offeringCore offering
Tenacy is a SaaS cybersecurity GRC (Governance, Risk, and Compliance) platform that enables enterprise security teams to centralize cyber activities, automate compliance workflows, and produce reliable reporting across multiple entities and frameworks. It supports 50+ compliance frameworks (ISO 27001, NIS 2, DORA, SOC 2, HIPAA, PCI DSS), provides 20+ native connectors to security and IT tools, and delivers multi-entity governance, risk management, and instant executive reporting for CISOs and RSSIs.
Product overview
Tenacy is a SaaS cybersecurity GRC (Governance, Risk, and Compliance) platform delivered as a unified product. The platform consists of four core pillars: (1) Multi-Entity Governance for centralizing entities, repositories, and processes across organizations; (2) Collaboration & Efficiency for automating workflows and improving coordination among stakeholders; (3) Instant Reporting for translating cyber activities into business language; and (4) Optimized Multi-Compliance for managing compliance objectives across entities. The platform integrates over 50 compliance frameworks (including ISO 27001, NIS 2, DORA, SOC 2, HIPAA, PCI DSS) and offers 20+ native connectors for automated data collection with security, ITSM, and IAM tools.
Differentiator
Problem solved
Functional benefit
Products and services
- Tenacy Platform
Quantifiable outcome
- 200+ organizations in 32 countries use Tenacy for risk management and multi-compliance
- +8 more outcomes
Companies that use Tenacy
Customer profileNamed customers17 records
Segments3 records
Ideal customer profiles2 records
Tenacy technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration17 records
Feature7 records
Tenacy partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- CESINflagshipTenacy is an official sponsor of CESIN (Club des Experts de la Sécurité de l'Information et du Numérique) - a leading cybersecurity professional association in France. The sponsorship continued from 2025 into 2026, marking Tenacy's ongoing commitment to the French cybersecurity community.
Scale indicators7 records
Recent moves5 records
Expansion highlights6 records
Tenacy competitors and assessment
Company assessmentDirect peers
- Secureframe: Compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS and more. Direct competitor with similar multi-framework coverage and enterprise customer orientation.
- Drata: Automated compliance and security monitoring platform covering SOC 2, ISO 27001, HIPAA, GDPR and similar frameworks. Competes head-to-head with Tenacy on multi-framework GRC for mid-market and enterprise.
- StandardFusion: GRC platform purpose-built for ISO 27001, SOC 2 and related frameworks, sold to mid-market and enterprise. Closely comparable to Tenacy in framework-centric cybersecurity compliance focus.
- Vanta: US-headquartered compliance automation platform for SOC 2, ISO 27001, HIPAA, NIS 2 etc. Direct competitor to Tenacy in automated multi-framework cyber GRC, though more PLG-led and global from inception.
- LogicGate Risk Cloud: No-code GRC workflow platform for risk and compliance management, including cyber risk and third-party risk. Comparable to Tenacy in configurable enterprise GRC and risk-based reporting.
Broad incumbents
- Regnology (RSA Archer): Regnology acquired RSA Archer, a longstanding enterprise GRC platform with strong financial services roots. Competes with Tenacy in cyber risk management and regulatory compliance for large enterprises.
- OneTrust: Large trust intelligence and GRC platform covering privacy, security and ethics. Broader incumbent than Tenacy, with overlapping cybersecurity GRC capabilities plus privacy, ethics and ESG modules.
- ServiceNow GRC: ServiceNow's Integrated Risk Management and GRC module competes with Tenacy in cyber risk and compliance for large enterprises, typically as part of broader ServiceNow platform deployments.
- Diligent (Galvanize): Diligent's Galvanize unit offers an enterprise GRC platform with strong risk and audit management. Competes with Tenacy in cyber risk and compliance reporting but as part of a broader governance suite.
Emerging players
- Sprinto: Compliance automation platform targeting fast-growing SaaS businesses with SOC 2, ISO 27001, HIPAA and more. Competes with Tenacy in automated framework management but skews more SMB/mid-market and PLG.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Tenacy social profiles
Digital presenceTenacy financial estimates
Financial estimateRevenue estimate
Valuation estimate
Tenacy leadership team
Management profileNumber of profiles
Profiles3 records
Tenacy funding detail
Funding detailFunding overview
Funding rounds3 records
Investors11 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Tenacy M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Tenacy
What does Tenacy do?
Tenacy is a SaaS cybersecurity GRC (Governance, Risk, and Compliance) platform that enables enterprise security teams to centralize cyber activities, automate compliance workflows, and produce reliable reporting across multiple entities and frameworks. It supports 50+ compliance frameworks (ISO 27001, NIS 2, DORA, SOC 2, HIPAA, PCI DSS), provides 20+ native connectors to security and IT tools, and delivers multi-entity governance, risk management, and instant executive reporting for CISOs and RSSIs.
Is Tenacy a public or private company?
Tenacy is a private company. It is classified as venture growth investor backed and is currently operating.
When was Tenacy founded?
Tenacy was founded in 2021. It employs 51 to 100 people.
Where is Tenacy based?
Tenacy is headquartered in Lyon, France, in the Europe region.
How does Tenacy make money?
One revenue line is on record: saaS Subscription.
Who are Tenacy's main competitors?
Direct peers on record are Secureframe, Drata, StandardFusion, Vanta and LogicGate Risk Cloud. Broad incumbents are Regnology (RSA Archer), OneTrust, ServiceNow GRC and Diligent (Galvanize). Sprinto is listed as an emerging player.
Does Tenacy have an API?
No public API is recorded for Tenacy.
What industry is Tenacy in?
Tenacy's product category is Cybersecurity GRC (Governance, Risk, and Compliance) Software. Its primary akta.pro industry code is FSAPAJAG, Governance, Controls & Policy Automation (GRC for Web3), with a secondary code of FSADALAJ, Risk Management, Controls, Governance & Policy (Crypto).