1. Home
  2. Companies
  3. Scytale

About

Scytale builds an AI-powered governance, risk and compliance (GRC) platform that automates security and regulatory compliance. The Scytale GRC Platform covers evidence collection, control monitoring, access reviews, vendor risk management, policy management and audit preparation, spanning more than 80 security, privacy and AI frameworks, including SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS. It provides real-time visibility into security posture, flags compliance drift before audits surface it, and reports on security gaps as they emerge.

The company's technical work sits at the intersection of AI-powered compliance automation, security posture monitoring, evidence collection, access review automation and drift detection. The stated approach pairs intelligent automation with human compliance expertise, and is aimed at eliminating manual, error-prone compliance work in favour of continuous compliance. The platform serves startups, scale-ups and enterprises alike.

Founded in 2020 by Meiran Galis, who previously worked in technology risk at Ernst & Young, Scytale reports that more than 1,000 companies worldwide use its platform. The company operates globally with notable activity in EMEA, and has been recognised as a G2 Leader in GRC and as AWS Partners' 2025 Rising Star Partner of the Year (Technology) in EMEA.

Similar companies

Drata logoDR

Drata

Drata is a trust management platform that automates compliance and security controls monitoring to help companies achieve and maintain frameworks such as SOC 2, ISO 27001, HIPAA and GDPR.

Vanta logoVA

Vanta

Vanta is a US-based security and compliance automation company founded in 2018, led by CEO Christina Cacioppo, offering an Agentic Trust Platform that automates compliance across SOC 2, ISO 27001, GDPR, HIPAA, and more.

Secureframe logoSE

Secureframe

Secureframe is an automated compliance platform built by compliance experts that helps organizations achieve and maintain security compliance across 30+ frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, CMMC, and FedRAMP.

Auxilius.ai logoAU

Auxilius.ai

An AI-native startup based in Germany that builds Agentic AI solutions to automate Governance, Risk, and Compliance (GRC) processes for enterprises, particularly in finance and audit.

Secfix logoSE

Secfix

Secfix automates security compliance for European SMBs, helping them achieve ISO 27001, SOC 2, GDPR, and TISAX certification via integrations with their existing tech stack.

Qualio logoQU

Qualio

Qualio provides an AI-powered quality and compliance management platform for life sciences companies, covering regulatory monitoring, audit readiness, and product lifecycle management.