AuditBoard

Expanded from a single audit-management tool into a multi-module 'connected risk' suite (SOX, ESG, IT risk, third-party risk) over about a decade, with ARR growing to roughly $200M by 2024.

Centralizes control testing, evidence collection and sign-off that otherwise live in spreadsheets across audit, risk and compliance teams, materially reducing manual audit cycle overhead at scale.

Independently verifiable: Hg's 2024 acquisition at over $3B (more than 20x the 2018 Series B valuation), ~$200M ARR, and reported use by more than 2,000 enterprises including nearly half the Fortune 500 — this is real adoption, not vendor hype.

Digitizes and consolidates the traditional audit/controls/SOX workflow category rather than inventing a new security paradigm; it's best understood as the category consolidator for audit management, not a category-definer across all of GRC.

As an audit/controls-management tool, 'efficacy against genuine threats' isn't directly applicable; the strongest available evidence is retention/scale (2,000+ enterprise customers, high ARR multiple at acquisition) rather than named incident outcomes.

Continued SOX, ESG disclosure, and third-party risk regulatory pressure, plus PE ownership incentivized to keep investing for a future exit (IPO was reportedly already planned pre-acquisition), support durable relevance.