Softcomply

What Softcomply does

SoftComply OÜ is a privately held Estonian software company founded in 2016 by Dr. Marion Lepmets (CEO), Margus Nael (CTO), Matteo Gubellini (Regulatory Affairs Manager), and Simon Gatto (CSO), operating from Tallinn, Estonia and Munich, Germany. The company builds an Atlassian-native GRC (Governance, Risk, and Compliance) platform delivered as native apps for Jira and Confluence and distributed exclusively through the Atlassian Marketplace, where it holds Gold Partner status. Its product portfolio centers on Risk Manager Plus (Jira-based risk management with customizable matrices and multi-sheet RAID tables), Risk Manager, Information Security Risk Manager (ISO 27001/NIS2/DORA), Document Manager (FDA 21 CFR Part 11 compliant document control on Confluence), SoftComply eQMS (a Confluence-based quality management system aligned with ISO 13485, IEC 62304, ISO 14971, and 21 CFR 820), and supporting add-ons including Risk Reporting, Static Snapshots, and two Validation apps that automate ISO 13485 Clause 4.1.6 software validation evidence generation.

The company sells through a product-led growth model on the Atlassian Marketplace with user-based subscription pricing (e.g., $2,900/year for the eQMS content package, $900/year for Static Snapshots) and self-serve free trials, without a traditional sales team. Its primary customer segment is medical device manufacturers requiring FDA, MDR, and ISO 13485 compliance, with secondary segments in IT service providers (ISO 27001/NIS2/DORA), manufacturing, automotive, and insurance. Disclosed customers include Thermo Fisher Scientific, Formula 1, NASA, Rheinmetall, Dentsply Sirona, and Aiforia, with the company claiming 1,123+ organizations, 2,450+ installs, and 238,375+ users across its apps. SoftComply is bootstrapped and founder-owned, with no external funding rounds or acquisitions disclosed. As of 2026 the company is actively pursuing ISO 27001 certification using its own GRC platform, partly to meet Atlassian Gold/Platinum Partner requirements and to strengthen enterprise trust.

Name

Softcomply

Legal name

SoftComply OÜ

Website

https://softcomply.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1–10 employees

Short description

SoftComply OÜ is an Estonian bootstrapped software company that builds Atlassian-native GRC apps for Jira and Confluence, providing risk management, FDA 21 CFR Part 11 document control, and eQMS solutions primarily to medical device manufacturers and other regulated industries via Atlassian Marketplace.

Ownership category

akta.pro rank

Headquarters

HQ city

Munich

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Subscription Licenses via Atlassian Marketplace: Annual and monthly subscription fees for all products, charged per user through Atlassian Marketplace. Payment processed via Atlassian's payment infrastructure. Fee calculated based on number of users as indicated on Atlassian Marketplace.
2. eQMS Content License: SoftComply eQMS sold as annual license at $2900/year for content package. Separate from Atlassian fees. Contact sales required for purchase.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels8 records

Core offering

SoftComply provides an Atlassian-native Governance, Risk, and Compliance (GRC) software suite delivered as Jira and Confluence apps. The portfolio covers risk management, document control, quality management, and compliance automation for regulated industries such as medical devices, IT security, manufacturing, automotive, insurance, and aerospace/defense. Products include Risk Manager Plus, Risk Manager, Information Security Risk Manager, Document Manager, SoftComply eQMS, Risk Reporting, Static Snapshots, and automated validation apps.

Product overview

SoftComply offers an Atlassian-native GRC (Governance, Risk, and Compliance) solution comprising a portfolio of apps that run inside Jira and Confluence. The core products include Risk Manager Plus and Risk Manager (for Jira-based risk management with customizable risk matrices, multi-sheet risk tables supporting RAID framework, and ISO 14971/IEC 62304 compliance), Information Security Risk Manager (for ISO 27001/NIS2/DORA compliance), Document Manager (FDA 21 CFR 11 compliant document control), and SoftComply eQMS (quality management system for medical devices). Supporting add-on modules include Risk Reporting (Confluence macro extension for displaying Jira risk data in Confluence), Validation for Confluence and Validation for Risk Manager Plus (automated compliance validation testing apps), and Static Snapshots (for freezing Confluence page content with timestamps). The portfolio serves regulated industries including medical devices, IT service providers, manufacturing, automotive, insurance, and aerospace/defense.

Differentiator

Problem solved

Functional benefit

Brands

• SoftComply eQMS: Quality Management System packaged as an app on Confluence, compliant with FDA & MDR Regulations.
• Risk Manager Plus
• Information Security Risk Manager
• Document Manager
• Validation for Confluence
• Risk Reporting
• SoftComply GRC Solution

Quantifiable outcome

• 4.9 out of 5 stars rating for Risk Manager Plus on Atlassian Marketplace
• +3 more outcomes

Named customers6 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

Feature6 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• AtlassiancoreTechnology or IntegrationAtlassian Gold Partner status. SoftComply develops native apps for Jira and Confluence, distributed exclusively through Atlassian Marketplace. Partnership includes security vetting, marketplace presence, and co-marketing within Atlassian ecosystem.
• TogethaminorImplementation/ SI/ Consulting PartnerPartner ecosystem member providing implementation and consulting services for SoftComply products.
• EficodeminorImplementation/ SI/ Consulting PartnerAtlassian partner ecosystem member offering consulting and implementation services.
• OrthogonalminorStrategic or Co-development PartnerPartner specializing in medical device software and regulatory compliance consulting.
• IzymesminorStrategic or Co-development PartnerPartner in the Atlassian ecosystem for compliance and quality solutions.
• OpusGuardminorChannel Partner/ Reseller/ DistributorChannel partner offering SoftComply solutions to customers.
• RegenoldminorChannel Partner/ Reseller/ DistributorChannel partner distributing SoftComply solutions.
• CWXminorChannel Partner/ Reseller/ DistributorChannel partner in the Atlassian ecosystem.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Vanta: Vanta is a compliance automation SaaS that helps organizations achieve and maintain SOC 2, ISO 27001, HIPAA, etc. Like SoftComply, it sells into regulated buyers needing framework-specific tooling, but Vanta operates platform-independently rather than as an Atlassian-native app.
• Drata: Drata is a compliance automation platform that streamlines SOC 2, ISO 27001, HIPAA and related audits via continuous control monitoring. It directly competes with SoftComply for the same compliance-driven buyer, although Drata is vendor-agnostic and not native to Atlassian.
• Secureframe: Secureframe is a compliance automation platform focused on SOC 2, ISO 27001, HIPAA, PCI and similar frameworks. It is a direct alternative for the same regulated-buyer pool that SoftComply addresses via its Information Security Risk Manager and risk/compliance stack.
• LogicGate: LogicGate is a GRC workflow automation platform centered on risk management, with no-code workflows similar in spirit to SoftComply's customizable risk tables — they compete for the same risk-manager persona inside regulated enterprises.
• Hyperproof: Hyperproof is a compliance operations platform supporting frameworks including SOC 2, ISO 27001 and FedRAMP, providing risk and evidence management. It targets the same mid-market GRC buyer that SoftComply addresses through Atlassian.

Broad incumbents

• OneTrust: OneTrust is a large, broadly-scoped privacy, ethics and GRC platform used by enterprise customers for risk and compliance programs. It overlaps with SoftComply's information security risk and compliance use cases as part of a much wider portfolio.
• ServiceNow GRC: ServiceNow Governance, Risk and Compliance is an enterprise-scale integrated risk management suite. It competes with SoftComply at the high end of the same risk-and-compliance buyer pool, but at much broader scope and very different price points.
• Diligent (Galvanize): Diligent, including Galvanize, provides enterprise GRC and audit management solutions with similar risk register and compliance workflow concepts to SoftComply — typically sold to larger organizations via enterprise motions.
• AuditBoard: AuditBoard is a connected risk platform for audit, risk and compliance, with risk register and SOX/ITGC capabilities comparable to SoftComply's risk management offering, but positioned for enterprise buyers.

Emerging players

• Sprinto: Sprinto is an emerging compliance automation platform focused on SaaS companies pursuing SOC 2, ISO 27001 and HIPAA. It overlaps with SoftComply on framework-driven compliance for tech-forward mid-market customers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@softcomply
• LinkedInlinkedin.com/company/softcomply
• Xx.com/softcomply

Compliance11 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Softcomply