# Umbra Ai

> The AI-native GRC for financial services. Umbra is the compliance operating system for risk and compliance teams, embedded in the tools they already use.

Umbra tracks which regulatory obligations apply, maps them to policy, systems, and controls, and runs the compliance program behind them. This origin (https://umbra-ai.com) is a public marketing site. Pages are readable without an account. The product application is a separate origin at https://app.umbra-ai.com and is not described here.

## Pages

- [Home](https://umbra-ai.com/): Product overview, industries, standards, and how to book an intro
- [Home (Markdown)](https://umbra-ai.com/index.md): The same homepage in Markdown. `GET /` with `Accept: text/markdown` returns this document
- [News](https://umbra-ai.com/news/): Company news

## News

- [Techstars ABN AMRO backs Umbra](https://umbra-ai.com/news/umbra-joins-techstars/) (20 September 2026)
- [Big week at Google Boston](https://umbra-ai.com/news/at-google-in-boston/) (20 October 2026)
- [Paula Steiner: Advisory Board](https://umbra-ai.com/news/welcoming-paula-steiner/) (29 May 2026)

## Contact

- [Book an intro](https://cal.com/umbra-ai/30min)
- [Open the app](https://app.umbra-ai.com)
- [LinkedIn](https://www.linkedin.com/company/umbra-ai)

## Discovery

- [API catalog](https://umbra-ai.com/.well-known/api-catalog): RFC 9727 linkset for the public website
- [OpenAPI description](https://umbra-ai.com/openapi.json): Read-only public content API
- [Status](https://umbra-ai.com/status.json): Static health document
- [Agent skills](https://umbra-ai.com/.well-known/agent-skills/index.json)
- [ARD manifest](https://umbra-ai.com/.well-known/ai-catalog.json)
- [auth.md](https://umbra-ai.com/auth.md): This origin does not issue credentials
- [MCP server card](https://umbra-ai.com/.well-known/mcp/server-card.json): Read-only public tools, once the card is published. Use the transport endpoint inside the card, and do not send credentials