# Sources

Publication or event dates are stated above. Undated live sources were checked for this report on 28 October 2026.

1. **Verdantix — Market Size And Forecast: Governance, Risk & Compliance Software 2025–2031**, 15 July 2026. `https://www.verdantix.com/vantage/report/market-size-and-forecast--governance--risk---compliance-software-2025-2031-global`
2. **MarketsandMarkets — US eGRC Market**, September 2026. `https://www.marketsandmarkets.com/Market-Reports/us-enterprise-governance-risk-compliance-market-210046005.html`
3. **Grand View Research — US Enterprise Governance, Risk and Compliance Market Outlook, 2033**, live databook. `https://www.grandviewresearch.com/horizon/outlook/enterprise-governance-risk-and-compliance-market/united-states`
4. **Workiva — Second Quarter 2026 Financial Results**, 4 August 2026. `https://investor.workiva.com/news-releases/news-release-details/workiva-announces-second-quarter-2026-financial-results`
5. **Fortune — Vanta reaches $300m ARR**, 29 April 2026. `https://fortune.com/2026/04/29/exclusive-vanta-arr-300-million-sequoia-shadow-ai-claude-cursor/`
6. **Vendr — AuditBoard pricing panel**, guide marked February 2026. `https://www.vendr.com/marketplace/auditboard?requestType=priceEstimate`
7. **Vendr — LogicGate pricing panel**, live page. `https://www.vendr.com/marketplace/logicgate?requestType=priceEstimate`
8. **IBM — OpenPages pricing**, live page. `https://www.ibm.com/products/openpages/pricing`
9. **AWS Marketplace — IBM OpenPages**, live 12-month pricing listing. `https://aws.amazon.com/marketplace/pp/prodview-6xime4g75fiyo`
10. **LogicGate — Pricing**, live supplier page. `https://www.logicgate.ai/platform/pricing/`
11. **ServiceNow — Integrated Risk Management entitlements**, effective 1 May 2025. `https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/other-document/entitlements/PROD12491.pdf`
12. **Forrester — The Total Economic Impact of ServiceNow Integrated Risk Management**, May 2026; commissioned by ServiceNow. `https://tei.forrester.com/go/ServiceNow/IRM/`
13. **Bankers Trust Company/JobTarget — Senior Enterprise Risk System Administrator**, posted 3 September 2026. `https://www.jobtarget.com/jobs/jt-t6fj4nviy3/sr-enterprise-risk-system-administrator-des-moines-iowa`
14. **Shea & Company/Stax — 2025 GRC Market Update**, reporting 2024 activity. `https://irp.cdn-website.com/bbd57769/files/uploaded/Stax_and_Shea_2025_GRC_Market_Update.pdf`
15. **Herbert Smith Freehills Kramer — Global M&A Report 2026: Cybersecurity**, reporting 2025 activity. `https://www.hsfkramer.com/it/insights/reports/2026/global-ma-report-2026/sector-perspectives/cybersecurity`
16. **Diligent — Acquisition of 3rdRisk**, 14 January 2026. `https://www.diligent.com/company/newsroom/diligent-acquires-3rdrisk`
17. **Complyance — $20m Series A announcement**, 11 February 2026, distributed through GlobeNewswire. `https://www.globenewswire.com/news-release/2026/02/11/3236367/0/en/Complyance-Raises-20M-Series-A-Led-by-GV-Google-Ventures-to-Modernize-Enterprise-GRC-with-Agentic-AI.html`
18. **Protecht — Acquisition of VISO TRUST**, 21 April 2026. `https://www.protechtgroup.com/en-us/news/protecht-acquires-leading-ai-powered-risk-platform-viso-trust`
19. **Optro — Acquisition of Midship**, 6 May 2026. `https://optro.ai/blog/optro-acquires-midship`
20. **Hg — Agreement to acquire AuditBoard**, 23 May 2024. `https://hgcapital.com/insights/auditboard-agrees-to-be-acquired-by-hg`
21. **HgCapital Trust — Q3 2024 Report**, confirming July 2024 investment completion. `https://www.hgcapitaltrust.com/~/media/Files/H/Hgcapital-Trust-V2/documents/investors/publications/2024/q3-report-september-2024.pdf`
22. **Anecdotes — Expanded Series B announcement**, original dateline 8 April 2025. `https://www.anecdotes.ai/pr-articles/anecdotes-secures-55m-series-b-to-revolutionize-ai-powered-grc-solutions`
23. **Reuters — Vanta Series D and valuation**, 23 July 2025, syndicated by Yahoo. `https://tech.yahoo.com/cybersecurity/articles/wellington-led-funding-boosts-vantas-120426152.html`
24. **Optro — AuditBoard rebrand announcement**, 9 March 2026. `https://optro.ai/blog/auditboard-is-now-optro`
25. **NYDFS — Cybersecurity Implementation Timeline for Covered Entities**, November 2023. `https://www.dfs.ny.gov/system/files/documents/2023/11/cybersecurity_implementation_timeline_covered_entities.pdf`
26. **NYDFS — Regulatory three- and five-year review**, discussing the November 2025 provisions and April 2026 notification. `https://www.dfs.ny.gov/industry_guidance/regulatory_and_legislative_activities/agency_rules_3and5year_review`
27. **Forrester — GRC Customers Have Spoken: Four Market Realities Vendors Can’t Ignore**, 13 October 2026. `https://www.forrester.com/blogs/grc-customers-have-spoken-four-market-realities-vendors-cant-ignore/`