Acuity Risk Management
Acuity Risk Management Ltd is a London-based, privately held software company that builds STREAM®, an integrated cybersecurity Governance, Risk and Compliance (GRC) platform delivered as STREAM® Cloud SaaS to mid-market organisations at early-to-intermediate stages of cyber risk maturity.
- Company typePrivate
- Founded2005
- HeadquartersLondon, United Kingdom
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Acuity Risk Management does
Acuity Risk Management Ltd is a privately held UK company founded in 2005 and headquartered in London, operating in the cybersecurity Governance, Risk and Compliance (GRC) software segment. The company builds STREAM®, an integrated risk management platform designed to help organisations manage cyber, operational, and IT risk within a single framework. Its target customers are mid-market organisations at early-to-intermediate stages of cyber risk maturity that lack the resources for complex on-premise GRC deployments.
The core technology is STREAM®, delivered as both a legacy on-premise platform and — since 16 March 2026 — as STREAM® Cloud, a cloud-native SaaS edition hosted on Microsoft Azure UK datacentres with three subscription tiers. The Azure UK infrastructure is a deliberate data-residency positioning for UK and EU-regulated buyers, and the platform's stated differentiator is integration and interoperability across risk and compliance workflows.
Commercially, Acuity operates a sales-led, land-and-expand SaaS model, aiming to drive recurring revenue growth through new mid-market customer acquisition and expansion within existing accounts. The company is privately held with 11–50 employees, does not disclose revenue, has no disclosed funding rounds, and lists no named customer logos in the available data. Leadership comprises Kerry Chambers (CEO) and Adam Freeman (CTO).
Acuity Risk Management firmographics
Firmographics- Name
- Acuity Risk Management
- Legal name
- Acuity Risk Management Ltd
- Website
- https://acuityrm.com
- Company type
- Private
- Founded year
- 2005
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Acuity Risk Management Ltd is a London-based, privately held software company that builds STREAM®, an integrated cybersecurity Governance, Risk and Compliance (GRC) platform delivered as STREAM® Cloud SaaS to mid-market organisations at early-to-intermediate stages of cyber risk maturity.
- Ownership category
- akta.pro rank
Acuity Risk Management industry classification
Industry- Product category
- Cybersecurity GRC Software
- NAICS
- Software Publishers (5132), Software Publishers (513210), Credit Bureaus (561450)
- SIC
- Miscellaneous Business Credit Institution (6159), Security Brokers, Dealers & Flotation Companies (6211)
- akta.pro primary industry
- Risk Management (ERM), Operational Risk & Business Continuity (BPAEAPAJ)
- akta.pro secondary industries
- Privacy, Consent & Data Protection Management (BPAEAPAF), Records Management, Information Governance & Retention (BPAEAPAO)
Keywords
Where Acuity Risk Management is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Markets served
Acuity Risk Management business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription Revenue: STREAM® Cloud is delivered as a SaaS solution with three subscription tiers targeting mid-market organisations. The company employs a land-and-expand commercial model to drive recurring revenue growth through new customer acquisition and expansion within accounts.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Three-tier subscription model for STREAM® Cloud |
Go-to-market motion1 record
Distribution channels1 record
Acuity Risk Management product offering
Product offeringCore offering
Acuity Risk Management develops and sells STREAM®, an integrated risk management platform for cybersecurity Governance, Risk and Compliance (GRC). Its cloud-native edition, STREAM® Cloud, is delivered as SaaS on Microsoft Azure UK datacentres with three subscription tiers, targeting mid-market organisations at early-to-intermediate stages of cyber risk management maturity.
Product overview
Acuity Risk Management offers a unified integrated risk management platform called STREAM®, which specialises in cybersecurity Governance, Risk and Compliance (GRC). The product portfolio consists of the core STREAM® platform and its cloud-native SaaS variant, STREAM® Cloud, launched in March 2026. STREAM® Cloud is delivered on Microsoft Azure UK datacentres with three subscription tiers targeting mid-market organisations.
Differentiator
Problem solved
Functional benefit
Brands
- STREAM®: Integrated risk management platform for cybersecurity Governance, Risk and Compliance. The cloud-native edition is called STREAM® Cloud.
Products and services
- STREAM® Cloud A cloud-native, SaaS edition of the STREAM® integrated risk management platform, delivered on Microsoft Azure UK datacentres with three subscription tiers. It is designed for mid-market organisations and companies at early-to-intermediate stages of cyber risk management that need integrated cybersecurity Governance, Risk and Compliance management without on-premise infrastructure.
- STREAM® Integrated risk management platform specialising in cybersecurity Governance, Risk and Compliance (GRC). STREAM® is the core platform on which the cloud-native STREAM® Cloud edition is built, serving organisations that need unified cyber risk and compliance workflows.
Companies that use Acuity Risk Management
Customer profileSegments1 record
Ideal customer profiles1 record
Acuity Risk Management technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature1 record
Acuity Risk Management partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Microsoft AzurecoreMicrosoft Azure provides the cloud infrastructure for STREAM® Cloud, with UK datacentres hosting the SaaS solution. This infrastructure partnership enables the cloud-native delivery of Acuity's cybersecurity GRC platform.
Scale indicators1 record
Recent moves3 records
Expansion highlights4 records
Acuity Risk Management competitors and assessment
Company assessmentDirect peers
- RSA Archer: RSA Archer is one of the most established dedicated GRC platforms, covering operational risk, IT risk, compliance, and cyber risk management. It is the most direct peer to STREAM® in product scope, though it skews to enterprise deployments and on-premise/hybrid delivery rather than mid-market SaaS.
- LogicGate Risk Cloud: LogicGate is a modern SaaS GRC platform delivering integrated risk and compliance workflows for mid-market and enterprise. Closely comparable to STREAM® Cloud in delivery model (cloud-native SaaS) and target buyer, and a primary competitor for mid-market cyber GRC deals.
- Riskonnect: Riskonnect is an integrated risk management platform combining operational, IT, cyber, and third-party risk on a single SaaS platform. It is a direct competitor to STREAM® in the integrated cyber/operational GRC category, though typically serving mid-market to enterprise customers.
- SureCloud: SureCloud is a UK-based GRC and cybersecurity SaaS provider offering integrated risk management, compliance, and cyber risk solutions. It is the most direct regional peer to Acuity, competing for the same UK mid-market customers with a comparable integrated cyber GRC proposition.
Broad incumbents
- OneTrust: OneTrust is a broad trust intelligence platform covering GRC, privacy, consent, and ESG. It overlaps with Acuity in the cyber/IT risk and compliance layer and serves many of the same mid-market buyers, albeit as part of a much wider trust-and-privacy portfolio.
- NAVEX Global: NAVEX Global is an established GRC and ethics/compliance platform covering risk, policy, whistleblower, and third-party risk. It overlaps with Acuity's integrated risk and compliance scope and serves similar mid-market and enterprise buyers, though with deeper ethics and HR-compliance specialisation.
- ServiceNow (IRM/GRC): ServiceNow's Integrated Risk Management (IRM) module is a broad incumbent GRC platform used by large enterprises to manage operational, IT, and cyber risk. Comparable to STREAM® as a horizontal cyber/operational risk platform, though ServiceNow targets larger customers with a much broader portfolio.
- Diligent (Galvanize / ACL): Diligent acquired Galvanize (ACL) and now offers an enterprise GRC platform covering risk, audit, and compliance. Comparable to STREAM® as a horizontal GRC suite, though positioned for larger organisations and broader board-level governance use cases.
Emerging players
- Vanta: Vanta is an emerging automated compliance platform focused on SOC 2, ISO 27001, and continuous monitoring for tech-forward mid-market companies. It overlaps with STREAM®'s compliance-adjacent scope and competes for the same mid-market GRC buyer, though with a narrower, automation-first product surface.
- Drata: Drata is an emerging compliance automation platform focused on SOC 2, ISO 27001, and continuous control monitoring for SaaS and tech mid-market buyers. It intersects with STREAM® Cloud's compliance use cases and represents the newer, automation-led threat to traditional GRC vendors.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat3 records
Key risks6 records
Key highlights6 records
Customer concentration
Acuity Risk Management social profiles
Digital presenceAcuity Risk Management financial estimates
Financial estimateRevenue estimate
Valuation estimate
Acuity Risk Management leadership team
Management profileNumber of profiles
Profiles2 records
Acuity Risk Management funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Acuity Risk Management M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Acuity Risk Management
What does Acuity Risk Management do?
Acuity Risk Management develops and sells STREAM®, an integrated risk management platform for cybersecurity Governance, Risk and Compliance (GRC). Its cloud-native edition, STREAM® Cloud, is delivered as SaaS on Microsoft Azure UK datacentres with three subscription tiers, targeting mid-market organisations at early-to-intermediate stages of cyber risk management maturity.
Is Acuity Risk Management a public or private company?
Acuity Risk Management is a private company. It is classified as unknown and is currently operating.
When was Acuity Risk Management founded?
Acuity Risk Management was founded in 2005. It employs 11 to 50 people.
Where is Acuity Risk Management based?
Acuity Risk Management is headquartered in London, United Kingdom, in the Europe region.
How does Acuity Risk Management make money?
One revenue line is on record: saaS Subscription Revenue.
Who are Acuity Risk Management's main competitors?
Direct peers on record are RSA Archer, LogicGate Risk Cloud, Riskonnect and SureCloud. Broad incumbents are OneTrust, NAVEX Global, ServiceNow (IRM/GRC) and Diligent (Galvanize / ACL). Emerging players are Vanta and Drata.
Does Acuity Risk Management have an API?
No public API is recorded for Acuity Risk Management.
What industry is Acuity Risk Management in?
Acuity Risk Management's product category is Cybersecurity GRC Software. Its primary akta.pro industry code is BPAEAPAJ, Risk Management (ERM), Operational Risk & Business Continuity, with a secondary code of BPAEAPAF, Privacy, Consent & Data Protection Management. Its NAICS code is 5132 and its SIC code is 6159.