What Approva does

Approva provides continuous monitoring software that enables enterprises to meet governance, risk, and compliance (GRC) requirements. The company's product suite is built around six integrated modules: Authorizations Insight (SoD violation detection via configurable business rules), Access Control Manager (compliant user provisioning with audit trails), Certification Manager (automated user/role reviews), Risk Assessment Framework (questionnaire-based risk scoring against SOX, HIPAA, and GDPR), Transaction and Master Data Monitoring (anomaly and duplicate detection across procure-to-pay, order-to-cash, and general ledger), and a Machine Learning-Based Watchlist (vendor screening against OIG/OFAC sanction lists). The underlying architecture is designed for deep integration with Infor's CloudSuite ERP platform, particularly Infor CloudSuite Healthcare, enabling rapid deployment and standardization across multi-site enterprises with frequent acquisitions.

Approva was an independent venture-backed company that raised approximately $58.7M across nine rounds between 2002 and 2009 from Columbia Capital, NEA, Novak Biddle, Sierra Ventures, Gold Hill Capital, and Silicon Valley Bank before being acquired by Infor. As part of Infor, the GRC suite is sold as a subscription module within Infor's Industry Cloud Platform and Data & Insights portfolio, distributed through Infor's enterprise field sales motion and AWS-hosted cloud infrastructure across the Americas, Europe, MEA, and APAC. The buyer profile is enterprise CFOs, risk officers, auditors, and operational leaders in regulated verticals (healthcare, manufacturing, financial services), with named customers including CHRISTUS Health and Miller Industries, the latter reporting a 98% productivity improvement in audit-related workflows after deployment. No public pricing tiers are disclosed; the GTM relies on consultative 'Request a Demo' and 'Let's Connect' motions rather than self-serve procurement.

Following the acquisition, Approva no longer operates as an independent reporting entity. The GRC line of business is now one product surface within Infor's broader CloudSuite portfolio, which also includes ERP, SCM, HCM, WFM, Financial Management, and Infor Velocity Suite AI offerings. Revenue, headcount, and growth metrics for the GRC line are not separately disclosed, and the product competes within an enterprise GRC market populated by SAP GRC, Oracle GRC, Workiva, ServiceNow GRC, and specialized vendors such as SailPoint and Pathlock for ERP-adjacent identity and SoD controls.

Name

Approva

Legal name

Infor

Website

https://approva.net

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

501–1,000 employees

Short description

Approva provides continuous monitoring software for enterprise governance, risk, and compliance, now sold as a modular suite inside Infor CloudSuite targeting CFOs, auditors, and risk officers in healthcare, manufacturing, and financial services.

Ownership category

akta.pro rank

Product category

Governance, Risk & Compliance (GRC) Software

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL)

akta.pro secondary industries

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Risk, Controls & Governance (GRC) Platforms (FSAFAOAG), Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO), Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI)

Keywords

• GRC software
• Compliance management
• Risk management software
• Access governance software
• Audit management platform

Headquarters

HQ city

Reston

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Enterprise Software Licensing: Cloud-based GRC software sold as part of Infor CloudSuite platform, providing governance, risk, and compliance capabilities to enterprise customers. Revenue derived from software subscriptions and licensing as part of the broader Infor Industry Cloud Platform ecosystem.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Approva provides continuous monitoring software that enables companies to meet their governance, risk, and compliance (GRC) requirements. Delivered as part of the Infor CloudSuite platform, it offers real-time risk assessments, automated monitoring of user access and business processes for segregation of duties (SoD) violations and fraud, streamlined user provisioning with audit trails, and pre-built support for regulatory frameworks including Sarbanes-Oxley, HIPAA, and GDPR.

Product overview

Infor offers a modular Governance, Risk & Compliance (GRC) software suite as part of its Data & Insights platform offering. The GRC portfolio consists of integrated modules including Authorizations Insight, Access Control Manager, Certification Manager, Risk Assessment Framework, Transaction and Master Data Monitoring, and Machine Learning-Based Watchlist. These modules work together to provide comprehensive risk management strategies addressing security, operational, and financial risks with automated monitoring for segregation of duties violations, risk assessments, user provisioning, and audit management.

Differentiator

Problem solved

Functional benefit

Products and services

• Governance, Risk & Compliance (GRC) Software Enterprise GRC software that empowers CFOs, risk officers, auditors, and leaders with real-time risk assessments, automated monitoring of user access and business processes, and streamlined audit management for reduced risk and more efficient operations. Delivered as part of the Infor Data & Insights platform offering.

Quantifiable outcome

• 98% productivity improvement for Miller Industries - questions answered in minutes vs hours

Named customers2 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature6 records

Partnerships

One partnership is on record.

• AWS (Amazon Web Services)coreTechnology or IntegrationInfor has a strategic partnership with AWS as part of Infor CloudSuite deployment infrastructure. The 'Infor + AWS Partnership' is referenced as a key technology partnership supporting cloud-based GRC and enterprise software delivery.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Emerging players

• OneTrust: OneTrust is a fast-growing trust intelligence platform spanning privacy, GRC, ethics, ESG, and third-party risk. It overlaps meaningfully with Approva's GDPR compliance and vendor screening capabilities and is emerging as a broader, faster-moving competitor in adjacent GRC segments.
• LogicGate: LogicGate offers a flexible, workflow-driven GRC platform for risk, compliance, and audit automation. It overlaps with Approva's workflow/audit automation capabilities and represents an emerging, more agile competitor in mid-market and enterprise segments.

Direct peers

• RSA Archer (Regnology): RSA Archer is one of the longest-standing enterprise GRC platforms, covering operational risk, IT risk, regulatory compliance, and audit. Recently divested to Regnology, it competes with Approva for large enterprise compliance and risk management deals.
• Diligent (Galvanize): Diligent's Galvanize product line offers enterprise GRC software covering audit, risk, compliance, and board reporting. It targets large, regulated enterprises and competes directly with Approva for audit management and continuous controls monitoring budgets.
• ServiceNow Integrated Risk Management (IRM): ServiceNow IRM is a leading enterprise GRC platform spanning risk, compliance, audit, vendor risk, and business continuity on the Now Platform. It is a direct peer in target market (CFOs, risk officers, auditors at large enterprises) and competes for the same compliance budget dollars.
• Workiva: Workiva provides a cloud platform for SOX, regulatory reporting, risk, and ESG compliance with strong audit-trail and collaboration capabilities. It is a direct competitor in the SOX/GRC automation space and overlaps with Approva's Risk Assessment Framework value proposition.
• SAP GRC: SAP's Governance, Risk, and Compliance portfolio (now largely integrated into S/4HANA and SAP GRC cloud) is a direct competitor to Approva/Infor GRC, offering SoD monitoring, access control, risk management, and audit workflows to large enterprises running SAP ERP.
• IBM OpenPages with Watson: IBM OpenPages is an enterprise GRC platform providing operational risk, regulatory compliance, IT governance, and internal audit capabilities. It targets the same Fortune 500 buyer personas (CROs, CFOs, auditors) and emphasizes AI/ML for risk identification – a direct competitor to Approva.
• Oracle Risk Management and Compliance: Oracle's GRC cloud offerings cover SoD, advanced access controls, financial controls, and audit management for Oracle ERP customers. It directly competes with Approva's module suite and benefits from tight Oracle ERP integration – a comparable coupling strategy.

Broad incumbents

• NAVEX Global: NAVEX Global is an established incumbent in ethics, compliance, and GRC software, including whistleblower hotlines, policy management, and risk/register tools. It overlaps with Approva's compliance and audit capabilities but focuses more on ethics/compliance programs than ERP-integrated controls.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/approva
• LinkedInlinkedin.com/company/approva

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds9 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Approva