NAVEX Global
NAVEX Global is a Lake Oswego, Oregon-based software company whose NAVEX One platform unifies governance, risk and compliance — including whistleblowing, training, policy management, IRM and third-party risk — for 13,000+ enterprise and mid-market customers across heavily regulated industries.
- Company typePrivate
- Founded1998
- HeadquartersLake Oswego, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What NAVEX Global does
NAVEX Global is a privately held software company headquartered in Lake Oswego, Oregon, that provides an integrated governance, risk and compliance (GRC) platform under the brand NAVEX One. The platform unifies whistleblowing and incident management (EthicsPoint Professional and Essentials), ethics and compliance training with an extensive course library, policy and procedure management (PolicyTech), integrated risk management (IRM), third-party risk management with RiskRate screening, regulatory change management, and disclosure/conflicts-of-interest management. Underlying workflows are coupled with shared compliance telemetry across 13,000+ customer organizations supporting 88 million+ users, and the system maps to major regulatory frameworks including HIPAA, GDPR, FCPA, California SB-553, DOJ Guidance, PCI-DSS and Sapin II.
The company monetizes through annual SaaS subscriptions quoted on a custom basis, with multi-module "Compliance Software Bundles" and a tiered offering that extends from a self-serve NAVEX for Small Business portal up to full enterprise deployment. Distribution runs through enterprise field sales augmented by inside sales for mid-market accounts and digital-first inbound via "Get Your Demo" and "Get Pricing" CTAs; marketing includes thought-leadership content (blog, definitive guides, benchmark reports, webinars, events) and localized editions in eight languages. Select enterprise references span Coca-Cola Europacific Partners, Diageo, Stellantis, Sharp, Palo Alto Networks, Fresenius Medical Center, BlueCross BlueShield of North Carolina, Serco, Apleona and Kerry Group across Healthcare, Financial Services, Insurance, Manufacturing, Energy & Utilities, Higher Education and Government verticals.
Historically an independent operator, NAVEX pursued serial M&A to broaden its GRC surface (Policy Technologies in 2012, The Network in 2015, Expolink, LockPath and WhistleB in 2019, CSRware in 2020), received a minority investment from CPP Investments in 2018, and in October 2025 was taken private via a majority stake acquisition led by Goldman Sachs Alternatives alongside Blackstone, with Arpan Sheth appointed as CEO.
NAVEX Global firmographics
Firmographics- Name
- NAVEX Global
- Legal name
- NAVEX Global, Inc.
- Website
- https://navexglobal.com
- Company type
- Private
- Founded year
- 1998
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- NAVEX Global is a Lake Oswego, Oregon-based software company whose NAVEX One platform unifies governance, risk and compliance — including whistleblowing, training, policy management, IRM and third-party risk — for 13,000+ enterprise and mid-market customers across heavily regulated industries.
- Ownership category
- akta.pro rank
NAVEX Global industry classification
Industry- Product category
- Governance, Risk, and Compliance (GRC) Software
- NAICS
- Software Publishers (5132), Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372), Services-Management Consulting Services (8742)
- akta.pro primary industry
- Governance, Risk & Compliance (GRC) Platforms (BPAEAPAA)
- akta.pro secondary industries
- IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL), Regulatory Change, Governance & Compliance Management (GRC) (FSACAJAK), Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO)
Keywords
Where NAVEX Global is headquartered
LocationHeadquarters
- HQ city
- Lake Oswego
- HQ country
- United States
- HQ region
- North America
Markets served
NAVEX Global business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Subscriptions (NAVEX One Platform): NAVEX generates revenue primarily through annual SaaS subscriptions for its integrated GRC platform. Customers access multiple modules including whistleblowing, training, policy management, and risk governance under a unified platform on a subscription basis.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise tier for large organizations requiring full GRC platform capabilities |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels10 records
NAVEX Global product offering
Product offeringCore offering
NAVEX Global sells the NAVEX One integrated GRC (Governance, Risk, and Compliance) software platform, with modules for whistleblowing and incident management (EthicsPoint Professional and EthicsPoint Essentials), ethics and compliance training, policy and procedure management (PolicyTech), integrated risk management (IRM), third-party risk management with RiskRate screening, COI disclosure management, and regulatory change management. The platform is delivered as an annual, quote-based SaaS subscription and is used by enterprise compliance, risk, HR, legal, audit, and information security teams to centralize GRC data and run AI-powered compliance workflows.
Product overview
NAVEX offers an integrated GRC platform called NAVEX One® that unifies governance, risk, and compliance activities in a single solution. The portfolio consists of the NAVEX One core platform with integrated modules including Whistleblowing & Incident Management (EthicsPoint Professional/Essentials), Ethics & Compliance Training (with Training Course Library), Policy & Procedure Management (PolicyTech), Risk & Governance (IRM), Third-Party Risk Management (with RiskRate Screening & Monitoring), and Disclosure Management. AI-powered capabilities are available across the platform. The platform also supports regulatory compliance for specific frameworks including Whistleblowing Laws, California SB-553, FCPA, GDPR, Sapin II, PCI-DSS, DOJ Guidance, HIPAA, and serves industries such as Healthcare, Financial Services, Insurance, Manufacturing, Energy & Utilities, Higher Ed, and Government.
Differentiator
Problem solved
Functional benefit
Brands
- NAVEX One: Integrated GRC platform connecting governance, risk and compliance activities
- EthicsPoint Professional
- EthicsPoint Essentials
- PolicyTech
Products and services
- NAVEX One GRC Platform Central integrated GRC platform where governance, risk and compliance programs find their solutions, connecting people, processes, data and technology for improved visibility and problem-solving. Designed for enterprise and mid-market risk, compliance, legal, HR, and audit teams.
- Whistleblowing & Incident Management Software solutions for making speaking up and transparency a natural part of an organization's risk and compliance routine, providing hotline intake, case management, and reporting across the workforce.
- EthicsPoint Professional Professional-grade whistleblowing and incident management solution with advanced hotline and case management features for organizations with mature compliance programs.
- EthicsPoint Essentials Entry-level whistleblowing and incident management solution for organizations starting their compliance reporting journey, providing core hotline and case management capabilities.
- Disclosure Management Conflicts of interest disclosure management software for managing employee and third-party disclosures across the organization.
- Ethics & Compliance Training Online ethics and compliance training that educates and engages employees with multilingual content targeted to their roles and experiences, including workplace harassment, anti-bribery, data privacy, and code of conduct training.
- Policy & Procedure Management (PolicyTech) PolicyTech policy management software that turns codes of conduct and policies into tools for real conversations and administration of organizational policies.
- Risk & Governance (IRM) Integrated Risk Management module for ongoing risk management and regulatory understanding, providing full risk oversight and prioritization across the enterprise.
- Third-Party Risk Management Comprehensive third-party risk management solution for evaluating, screening, and monitoring vendor and supplier compliance risks, including RiskRate screening and monitoring.
- Regulatory Change Management Regulatory change management software that monitors regulatory updates, assesses impact, manages change plans, and preserves defensible audit evidence for audit readiness, particularly for U.S. banks and credit unions.
- Compliance Software Bundle (Compliance Essentials) Entry-level compliance software bundle designed for organizations getting started with risk and compliance management, bringing together core NAVEX capabilities into a single offering.
Quantifiable outcome
- 88 million people and employees supported worldwide
- +3 more outcomes
Companies that use NAVEX Global
Customer profileNamed customers18 records
Segments10 records
Ideal customer profiles3 records
NAVEX Global technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature10 records
NAVEX Global partnerships and signals
Strategic signalScale indicators6 records
Recent moves7 records
Expansion highlights6 records
NAVEX Global competitors and assessment
Company assessmentBroad incumbents
- ServiceNow: ServiceNow's Integrated Risk Management (IRM) and Governance, Risk, and Compliance products compete directly with NAVEX One at the enterprise level, offering GRC workflows as part of a much broader enterprise platform. ServiceNow is a key threat for CIO-led platform consolidation deals.
- Microsoft Purview Compliance Manager: Microsoft's Purview Compliance Manager and broader Compliance portfolio directly overlap with NAVEX's regulatory change, policy and risk modules, especially for enterprises standardized on the Microsoft ecosystem. Bundled pricing and IT-procurement incumbency make it a frequent displacement threat.
- SAP GRC: SAP's GRC and risk management suite targets large enterprises, particularly in financial services and manufacturing, and competes with NAVEX's IRM, regulatory change management and third-party risk modules. SAP bundles GRC with ERP, creating a strong incumbent position in regulated industries.
Emerging players
- LogicGate: LogicGate offers a modern, workflow-first GRC platform with Risk Cloud, overlapping with NAVEX's IRM, third-party risk and policy management modules. An emerging challenger particularly in the mid-market and with API-first customization needs.
Direct peers
- OneTrust: OneTrust's Trust Intelligence Platform covers ethics and compliance, privacy, GRC and third-party risk, competing directly with NAVEX's disclosure management, third-party risk and compliance training offerings. Comparable enterprise customer base and compliance content depth.
- Diligent: Diligent (which acquired Galvanize/ACL) offers an integrated GRC platform covering risk, compliance, audit and board reporting — directly overlapping with NAVEX One's IRM, audit and governance modules. Comparable mid-market and enterprise GTM and acquisition-driven platform strategy.
- MetricStream: MetricStream is a long-standing independent GRC platform vendor with comparable integrated risk, regulatory, compliance and audit capabilities. Most direct independent competitor to NAVEX One across enterprise and regulated verticals.
- RSA Archer (now Regnology): RSA Archer, now part of Regnology, is a heritage enterprise GRC platform competing with NAVEX in operational risk, regulatory compliance and enterprise risk management — particularly in financial services and large global enterprises.
- Riskonnect: Riskonnect provides an integrated risk management platform covering enterprise risk, compliance, third-party risk and incident management — a direct competitor to NAVEX's IRM and broader NAVEX One platform, particularly in healthcare, financial services and manufacturing verticals.
- Wolters Kluwer OneSumX: Wolters Kluwer's OneSumX for Regulatory Reporting and Reg Manager (which recently added AI-powered regulatory change management for US banks/credit unions) directly competes with NAVEX in financial services regulatory compliance. Closely comparable product strategy and customer base.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
NAVEX Global social profiles
Digital presenceNAVEX Global compliance and trust
Trust signalCompliance1 record
NAVEX Global financial estimates
Financial estimateRevenue estimate
Valuation estimate
NAVEX Global leadership team
Management profileNumber of profiles
Profiles5 records
NAVEX Global funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
NAVEX Global M&A and investment
M&A and investmentM&A7 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about NAVEX Global
What does NAVEX Global do?
NAVEX Global sells the NAVEX One integrated GRC (Governance, Risk, and Compliance) software platform, with modules for whistleblowing and incident management (EthicsPoint Professional and EthicsPoint Essentials), ethics and compliance training, policy and procedure management (PolicyTech), integrated risk management (IRM), third-party risk management with RiskRate screening, COI disclosure management, and regulatory change management. The platform is delivered as an annual, quote-based SaaS subscription and is used by enterprise compliance, risk, HR, legal, audit, and information security teams to centralize GRC data and run AI-powered compliance workflows.
Is NAVEX Global a public or private company?
NAVEX Global is a private company. It is classified as private equity controlled and is currently operating.
When was NAVEX Global founded?
NAVEX Global was founded in 1998. It employs 1,001 to 5,000 people.
Where is NAVEX Global based?
NAVEX Global is headquartered in Lake Oswego, United States, in the North America region.
How does NAVEX Global make money?
One revenue line is on record: software Subscriptions (NAVEX One Platform).
Who are NAVEX Global's main competitors?
Broad incumbents on record are ServiceNow, Microsoft Purview Compliance Manager and SAP GRC. LogicGate is listed as an emerging player. Direct peers are OneTrust, Diligent, MetricStream, RSA Archer (now Regnology), Riskonnect and Wolters Kluwer OneSumX.
Does NAVEX Global have an API?
No public API is recorded for NAVEX Global.
What industry is NAVEX Global in?
NAVEX Global's product category is Governance, Risk, and Compliance (GRC) Software. Its primary akta.pro industry code is BPAEAPAA, Governance, Risk & Compliance (GRC) Platforms, with a secondary code of HDAEALAK, IT Governance, Risk & Compliance (IT GRC) Platforms. Its NAICS code is 5132 and its SIC code is 7372.