Sources

Publication or event dates are stated above. Undated live sources were checked for this report on 28 October 2026.

1. Verdantix — Market Size And Forecast: Governance, Risk & Compliance Software 2025–2031, 15 July 2026. https://www.verdantix.com/vantage/report/market-size-and-forecast--governance--risk---compliance-software-2025-2031-global
2. MarketsandMarkets — US eGRC Market, September 2026. https://www.marketsandmarkets.com/Market-Reports/us-enterprise-governance-risk-compliance-market-210046005.html
3. Grand View Research — US Enterprise Governance, Risk and Compliance Market Outlook, 2033, live databook. https://www.grandviewresearch.com/horizon/outlook/enterprise-governance-risk-and-compliance-market/united-states
4. Workiva — Second Quarter 2026 Financial Results, 4 August 2026. https://investor.workiva.com/news-releases/news-release-details/workiva-announces-second-quarter-2026-financial-results
5. Fortune — Vanta reaches $300m ARR, 29 April 2026. https://fortune.com/2026/04/29/exclusive-vanta-arr-300-million-sequoia-shadow-ai-claude-cursor/
6. Vendr — AuditBoard pricing panel, guide marked February 2026. https://www.vendr.com/marketplace/auditboard?requestType=priceEstimate
7. Vendr — LogicGate pricing panel, live page. https://www.vendr.com/marketplace/logicgate?requestType=priceEstimate
8. IBM — OpenPages pricing, live page. https://www.ibm.com/products/openpages/pricing
9. AWS Marketplace — IBM OpenPages, live 12-month pricing listing. https://aws.amazon.com/marketplace/pp/prodview-6xime4g75fiyo
10. LogicGate — Pricing, live supplier page. https://www.logicgate.ai/platform/pricing/
11. ServiceNow — Integrated Risk Management entitlements, effective 1 May 2025. https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/other-document/entitlements/PROD12491.pdf
12. Forrester — The Total Economic Impact of ServiceNow Integrated Risk Management, May 2026; commissioned by ServiceNow. https://tei.forrester.com/go/ServiceNow/IRM/
13. Bankers Trust Company/JobTarget — Senior Enterprise Risk System Administrator, posted 3 September 2026. https://www.jobtarget.com/jobs/jt-t6fj4nviy3/sr-enterprise-risk-system-administrator-des-moines-iowa
14. Shea & Company/Stax — 2025 GRC Market Update, reporting 2024 activity. https://irp.cdn-website.com/bbd57769/files/uploaded/Stax_and_Shea_2025_GRC_Market_Update.pdf
15. Herbert Smith Freehills Kramer — Global M&A Report 2026: Cybersecurity, reporting 2025 activity. https://www.hsfkramer.com/it/insights/reports/2026/global-ma-report-2026/sector-perspectives/cybersecurity
16. Diligent — Acquisition of 3rdRisk, 14 January 2026. https://www.diligent.com/company/newsroom/diligent-acquires-3rdrisk
17. Complyance — $20m Series A announcement, 11 February 2026, distributed through GlobeNewswire. https://www.globenewswire.com/news-release/2026/02/11/3236367/0/en/Complyance-Raises-20M-Series-A-Led-by-GV-Google-Ventures-to-Modernize-Enterprise-GRC-with-Agentic-AI.html
18. Protecht — Acquisition of VISO TRUST, 21 April 2026. https://www.protechtgroup.com/en-us/news/protecht-acquires-leading-ai-powered-risk-platform-viso-trust
19. Optro — Acquisition of Midship, 6 May 2026. https://optro.ai/blog/optro-acquires-midship
20. Hg — Agreement to acquire AuditBoard, 23 May 2024. https://hgcapital.com/insights/auditboard-agrees-to-be-acquired-by-hg
21. HgCapital Trust — Q3 2024 Report, confirming July 2024 investment completion. https://www.hgcapitaltrust.com/~/media/Files/H/Hgcapital-Trust-V2/documents/investors/publications/2024/q3-report-september-2024.pdf
22. Anecdotes — Expanded Series B announcement, original dateline 8 April 2025. https://www.anecdotes.ai/pr-articles/anecdotes-secures-55m-series-b-to-revolutionize-ai-powered-grc-solutions
23. Reuters — Vanta Series D and valuation, 23 July 2025, syndicated by Yahoo. https://tech.yahoo.com/cybersecurity/articles/wellington-led-funding-boosts-vantas-120426152.html
24. Optro — AuditBoard rebrand announcement, 9 March 2026. https://optro.ai/blog/auditboard-is-now-optro
25. NYDFS — Cybersecurity Implementation Timeline for Covered Entities, November 2023. https://www.dfs.ny.gov/system/files/documents/2023/11/cybersecurity_implementation_timeline_covered_entities.pdf
26. NYDFS — Regulatory three- and five-year review, discussing the November 2025 provisions and April 2026 notification. https://www.dfs.ny.gov/industry_guidance/regulatory_and_legislative_activities/agency_rules_3and5year_review
27. Forrester — GRC Customers Have Spoken: Four Market Realities Vendors Can’t Ignore, 13 October 2026. https://www.forrester.com/blogs/grc-customers-have-spoken-four-market-realities-vendors-cant-ignore/