# Umbra

The AI-native GRC for financial services.

Purpose-built for risk and compliance teams. Scale your business without the risk.

Backed by Techstars ABN AMRO Future of Finance.

## What Umbra does

Umbra tracks what regulatory obligations apply, then builds and runs the compliance program behind them.

- **Know what applies.** Track and assess EU, UK, and member-state rules, including supervisory guidance.
- **Find the gaps.** Map obligations to policy, systems, and controls, then remediate in one system.
- **Build your program.** From AMLR to DORA, assign key controls, collect evidence, and monitor continuously.

## Embedded in the tools you already use

SharePoint, Slack, Google Drive, Salesforce, Notion, Workday, Figma, BambooHR, Gmail, NetSuite, Linear, Confluence, SAP, Outlook, Claude, and GitHub.

## Built for the most regulated industries

- **Investment firms.** Enter new markets and stay compliant.
- **Crypto.** Launch new products without the risk.
- **Payments.** Navigate nuanced scheme rules.
- **Banks.** Handle prudential and conduct obligations.

Umbra meets the demands of any regulated financial firm.

## Standards

Umbra is committed to rigorous international safety and security standards.

- **GDPR.** Umbra operates under GDPR.
- **DORA.** Umbra is DORA-aligned, built to meet the EU standard for operational resilience.
- **ISO 27001.** Working toward ISO 27001 certification. In progress.
- **SOC 2 Type 2.** Working toward secure and compliant management of data across all systems. In progress.

## News

- [Techstars ABN AMRO backs Umbra](https://umbra-ai.com/news/umbra-joins-techstars/) — 20 September 2026. Umbra Ai got into Techstars to redefine risk and compliance for regulated financial firms.
- [Big week at Google Boston](https://umbra-ai.com/news/at-google-in-boston/) — 20 October 2026.
- [Paula Steiner: Advisory Board](https://umbra-ai.com/news/welcoming-paula-steiner/) — 29 May 2026.

## Next step

- [Book an intro](https://cal.com/umbra-ai/30min)
- [Open the app](https://app.umbra-ai.com)

## For agents

This document is the Markdown representation of https://umbra-ai.com/. Browsers receive HTML. Clients that send `Accept: text/markdown` receive this body with `Content-Type: text/markdown`.

The public site does not require authentication. Read [llms.txt](https://umbra-ai.com/llms.txt), the [API catalog](https://umbra-ai.com/.well-known/api-catalog), and [auth.md](https://umbra-ai.com/auth.md). Content Signals in robots.txt allow search and AI input, and decline model training. The read-only MCP server card, when published, is at [/.well-known/mcp/server-card.json](https://umbra-ai.com/.well-known/mcp/server-card.json).