Privva
- Company typePrivate
- Founded2016
- HeadquartersBaltimore, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
Privva firmographics
Firmographics- Name
- Privva
- Legal name
- Smarsh Inc.
- Website
- https://privva.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
Privva industry classification
Industry- Product category
- Vendor Risk Management Software
- NAICS
- Software Publishers (5132), Software Publishers (51321)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE)
- akta.pro secondary industry
- Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI)
Keywords
Where Privva is headquartered
LocationHeadquarters
- HQ city
- Baltimore
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Privva business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Vendor Risk Management SaaS Subscriptions: Two subscription tiers (Tech and Managed) provide end-to-end access to the VRM software platform, with the Managed tier adding Smarsh-performed security review, scoring, and follow-up ticket creation services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Tech — Self-service software access |
| Subscription | Annual | Managed — Software + Smarsh-performed review services |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
Privva product offering
Product offeringCore offering
Privva provides a cloud-based Vendor Risk Management (VRM) SaaS platform that enables enterprises to assess, score, and monitor security risks posed by third-party vendors with access to sensitive data. The platform automates vendor questionnaire distribution, weighted risk scoring, remediation ticket creation and tracking, and on-demand reporting from a single centralized database, sold via a self-service Tech tier and a Managed tier that adds Smarsh-performed security review and scoring services.
Product overview
No product information available for Privva in the provided source data. The source content pertains to Smarsh's Vendor Risk Management platform, not Privva.
Differentiator
Problem solved
Functional benefit
Brands
- Vendor Risk Management (VRM): Third-party vendor risk management platform for automating security assessments, scoring, and remediation tracking.
Products and services
- Vendor Risk Management (VRM) — Tech tier
- Vendor Risk Management (VRM) — Managed tier
Quantifiable outcome
- Increase vendor risk assessment efficiency up to 70% through automated scoring, risk filtering, and remediation ticket generation
Companies that use Privva
Customer profileSegments4 records
Ideal customer profiles4 records
Privva technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature7 records
Privva partnerships and signals
Strategic signalScale indicators2 records
Recent moves6 records
Expansion highlights4 records
Privva competitors and assessment
Company assessmentBroad incumbents
- Riskonnect: Riskonnect offers an integrated risk management suite that includes third-party risk modules alongside enterprise risk and compliance. It is a comparable platform play targeting the same mid-market and enterprise regulated buyers.
- OneTrust: OneTrust's Third-Party Risk Management module is the broadest TPRM offering in the market, covering vendor onboarding, assessments, and ongoing monitoring. It is the most direct large-platform competitor to Privva across both SMB and enterprise buyers.
- SecurityScorecard: SecurityScorecard provides continuous vendor cybersecurity ratings that integrate into third-party risk workflows. It competes with Privva for the same buyer (enterprise security/risk teams) and increasingly overlaps on TPRM use cases.
- ServiceNow GRC / Integrated Risk Management: ServiceNow's GRC and Third-Party Risk modules sit inside its broader enterprise platform and are often the default choice for large regulated enterprises. It is a key incumbent competitor for enterprise TPRM spend that Privva targets.
- Bitsight Trust Manager: Bitsight pairs external attack-surface ratings with its Trust Manager TPRM workflow to drive continuous vendor monitoring. It is a larger incumbent that competes for the same enterprise security/risk budget as Privva.
Direct peers
- Prevalent: Prevalent offers vendor risk assessment, scoring, and remediation with both self-service SaaS and managed services tiers — a near-exact functional and commercial analog to Privva's Tech/Managed two-tier model.
- Venminder: Venminder is a TPRM platform purpose-built for financial services and regulated industries, combining vendor assessments, due diligence documentation, and ongoing monitoring — directly comparable to Privva's regulated-vertical positioning.
- Whistic: Whistic is a vendor security assessment exchange that lets vendors share pre-completed assessments and lets buyers evaluate them — a direct SaaS alternative to Privva's questionnaire-and-scoring model.
- ProcessUnity: ProcessUnity is a dedicated TPRM/VRM platform that automates vendor risk assessments, scoring, and remediation workflows — closely mirroring Privva's core use case and serving similar financial services and regulated enterprise buyers.
Emerging players
- Vanta: Vanta automates security compliance (SOC 2, ISO 27001) and includes vendor risk assessment workflows. While primarily a compliance platform, its TPRM capabilities increasingly overlap with Privva's SMB-focused self-service tier.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights5 records
Customer concentration
Privva social profiles
Digital presencePrivva financial estimates
Financial estimateRevenue estimate
Valuation estimate
Privva leadership team
Management profileNumber of profiles
Profiles2 records
Privva funding detail
Funding detailFunding overview
Funding rounds2 records
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Privva M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Privva
What does Privva do?
Privva provides a cloud-based Vendor Risk Management (VRM) SaaS platform that enables enterprises to assess, score, and monitor security risks posed by third-party vendors with access to sensitive data. The platform automates vendor questionnaire distribution, weighted risk scoring, remediation ticket creation and tracking, and on-demand reporting from a single centralized database, sold via a self-service Tech tier and a Managed tier that adds Smarsh-performed security review and scoring services.
Is Privva a public or private company?
Privva is a private company. It is classified as corporate owned and is currently operating.
When was Privva founded?
Privva was founded in 2016. It employs 11 to 50 people.
Where is Privva based?
Privva is headquartered in Baltimore, United States, in the North America region.
How does Privva make money?
One revenue line is on record: vendor Risk Management SaaS Subscriptions.
Who are Privva's main competitors?
Broad incumbents on record are Riskonnect, OneTrust, SecurityScorecard, ServiceNow GRC / Integrated Risk Management and Bitsight Trust Manager. Direct peers are Prevalent, Venminder, Whistic and ProcessUnity. Vanta is listed as an emerging player.
Does Privva have an API?
No public API is recorded for Privva.
What industry is Privva in?
Privva's product category is Vendor Risk Management Software. Its primary akta.pro industry code is HDADAIAE, Third-Party/Vendor Risk Management (TPRM/VRM), with a secondary code of HDABAHAI, Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC). Its NAICS code is 5132 and its SIC code is 7372.