tl;dr: We've raised an $18M Series A led by NEA to stop tracking compliance work and start executing it. We are replacing dashboards with autonomous AI teammates that perform complex risk and compliance work from start to finish.

Today, we are proud to announce that Zania has raised an $18 million Series A. The round was led by the visionary team at NEA (Mustafa Neemuchwala, Hilarie Koplow-McAdams, Scott Sandell), with enthusiastic participation from Anthropic and Menlo Ventures (Anthology Fund), Palm Drive Capital, and prominent angels we’re humbled to have on our side: George Kurtz, Founder & CEO of CrowdStrike; Mike Curtis, former Head of Engineering at Airbnb; and Anand Deshpande, Founder & Chairman of Persistent Systems.

This isn't just funding for a better Security risk and compliance tool. This is the capital to build a new category of GRC software—one where the software does the work.

Why GRC Is Broken

Every enterprise in the world performs risk and compliance work, spending millions on expensive consultants and large internal teams. The problem is that while other GRC platforms help track and display this work, the vast majority of time and money is spent doing it.

This has trapped teams in a vicious loop. As regulations intensify, they are drowning in manual, back-office work—a relentless cycle of collecting and assessing evidence, mapping controls, documenting gaps, and nagging stakeholders.

Most Risk and Compliance platforms offer a better way to view this chaos through dashboards and tickets. But this just illuminates the mountain of manual labor. It creates a state of "compliance theater," where the appearance of activity is mistaken for actual risk reduction.

Our Lightbulb Moment: From Tracking to Execution

When we founded Zania, we saw that GRC teams weren't suffering from a lack of visibility; they were suffering from a lack of leverage. They needed more hands, not more charts or workflows.

So, we asked a different question: What if software could act as a true teammate? What if it could be an agent that autonomously performs the complex, judgment-based tasks that consume thousands of hours?

That’s why we built Zania. Our domain-specific AI teammates don't just assign tasks—they execute them with an understanding of your company’s unique context. Here are a few examples:

• Continuous Compliance: Our agents continuously collect evidence, test 100% of your controls for design and operating effectiveness, and identify gaps against any framework (SOC 2, ISO 27001, etc.), keeping you perpetually audit-ready.

• Third-Party Risk: Give an agent a vendor name. It performs the full-lifecycle assessment—analyzing their controls, breach history, and supply chain to give you a deep view of their security and AI safety posture.

• First-Party Risk: Replace guesswork with certainty. Our agents provide precise, quantitative evaluations of your internal risk based on your unique systems, controls, and data, allowing you to prioritize what truly matters.

• Security Questionnaires: The AI leverages your internal security context to answer incoming vendor questionnaires with unrivaled precision, delivering tailored responses in minutes.

This is the difference between other platforms and Zania. It’s how we compress workflows that take months into minutes, with accuracy that beats the top security risk and compliance professionals, delivering results up to 30x faster and at 90% lower cost.

The Proof Is in the Results

The proof isn’t just in the technology, but in the adoption by enterprises with the world's toughest compliance demands—like KPMG, Plaid, Grant Thornton, Stanford University and others—who are using our AI agents today.

This momentum has driven 10x ARR growth this year, and we are proud to be already cash-flow positive—a testament to the immense and immediate value we deliver.

“Zania’s AI agents have made our risk assessments dramatically faster and more efficient... they turned a manual marathon into a sprint, freeing our team to focus on strategic risk management.”

— Kenneth Moras, Head of Security GRC, Plaid

What's Next: The Future is Autonomous

This Series A will fuel our mission to build AI agents that can execute the full spectrum of risk and compliance work. Our vision is to empower human experts to operate strategically, not be drowning in back-office work. We will focus on four key areas:

• Product Expansion: Our goal is to automate the entire GRC lifecycle. We will expand our agent library to handle end-to-end compliance work, creating a truly autonomous platform that handles exhaustive tasks while elevating human experts to focus on strategic judgment and oversight.

• AI Leadership: We are building the foundational intelligence for autonomous GRC. This means deepening our investment in proprietary models trained on unique GRC data, allowing our agents to perform complex, multi-step reasoning with superhuman accuracy and reliability.

• Team Growth: To meet overwhelming customer demand and accelerate our ambitious roadmap, we are tripling our team. We’re seeking mission-driven engineers, researchers, and GTM professionals obsessed with solving complex problems and building a new category of enterprise AI.

• Market Domination: We will become the new standard for GRC by penetrating the most tech-forward GRC teams, solving compliance challenges for the Fortune 500, and empowering leading audit and advisory firms with AI teammates to transform how they serve their clients.

The era of passive GRC software is over. The future is proactive, strategic, and autonomous. The future is Zania.

Thank You

We are immensely grateful to everyone who has made this possible: our investors, our pioneering customers, and the brilliant Zania team building the future every day.

If you want to see how Zania can automate your GRC operations and free your team for strategic work, book a demo. 

If you want to help build the first autonomous platform for enterprise risk and compliance, check out our open roles.