HelmGuard, the agentic GRC firm has closed a $7.3m seed round aimed at replacing document-heavy compliance work with AI agents that pull risk signals directly from source systems.
The round was jointly led by Infinity Ventures and Frontline, with additional backing from FinTech Collective, Stage 2 Capital and Entrepreneurs First. HelmGuard says the approach compresses assessment cycles that once took weeks into a matter of hours.
Proceeds will fund the firm’s push into the US, adding New York and San Francisco offices alongside its London base, while also supporting wider hiring across engineering and go-to-market teams. Part of the capital will go towards building an agent assurance layer capable of monitoring how AI agents behave once they are live in production.
Regulated industries such as banking, insurance, healthcare and industrials currently spend vast sums each year compiling documentation to manage security and compliance risk, relying on legacy platforms built around questionnaires and templated checklists rather than genuine decision-making.
Even as rival tools begin layering AI onto that paperwork, HelmGuard argues they still cannot tell a business how a specific risk connects to the control meant to mitigate it, whether a given vendor can be trusted, or whether an AI agent is behaving as intended.
HelmGuard instead links previously siloed risk, security and compliance data, drawing on unstructured documentation as well as direct connections into source systems. Purpose-built AI agents then run workflows spanning third-party risk management, agent oversight and control gap analysis, consolidating the results into a single firm-wide view, with citations, visible reasoning and human checkpoints built in so teams have a defensible record for auditors and regulators.
The company points to EY research showing that a third of businesses rank third-party and supply chain risk among their biggest threats, with 41% of that group lacking confidence that their compliance function could manage it.
HelmGuard also notes that vendors are increasingly embedding agentic capabilities into products that were originally assessed long before AI featured in the offering, meaning risk sign-off granted at the point of purchase may no longer reflect what a system is actually doing today.
Its customer base spans the US, Canada, the UK, Hong Kong and South Africa, including firms migrating away from older GRC tools.
One US insurance customer had 1,250 counterparties assessed in under a week, prompting a full switch away from its previous platform that HelmGuard’s engineers completed within ten days, while a separate telehealth and telecoms client has cut first response times on customer assurance checks from days to minutes.
London-based Callosum, which sells AI technology into regulated markets, has brought in HelmGuard to design and run its security and compliance programme. HelmGuard’s Verified Risk Network is also designed to let organisations exchange live, agent-verified answers instead of static paperwork when assessing counterparties, vendors or portfolio companies.
HelmGuard co-founder and CEO John Daley said, “Most compliance platforms were built to document a process, not to reach a conclusion. Now they’re using AI to produce those documents faster, which doesn’t help anyone decide anything.
“Our agents go to the source to collect and assess risk signals directly, abstracting away the manual data collection and assessment work that burns thousands of hours annually. This funding lets us bring that capability to far more teams and extend it to governing the AI agents being deployed on other workflows.”
HelmGuard co-founder and CTO Jack Miller said, “An AI vendor’s risk profile changes with every model update and every new tool its agents can call. As a result, a certification issued months ago describes a reality that our customers cannot rely upon. Regulated buyers need to ask a current question and get a verified current answer, while vendors don’t want to be bogged down re-answering stale questionnaires.
“The Verified Risk Network makes the unit of assurance a claim assessed directly by an agent, rather than a document, and enables agent-to-agent exchange on a continuous basis.”
Copyright © 2026 RegTech Analyst
Copyright © 2026 RegTech Analyst
