Screenata

Screenata is an AI-powered compliance automation platform designed to help companies, primarily startups and small businesses under 50 employees, achieve and maintain security compliance certifications such as SOC 2, HIPAA, ISO 27001, ISO 42001, and GDPR. The platform centers on an AI agent named "Vera" that functions as an autonomous compliance operator rather than a passive dashboard. Vera performs scheduled tasks including daily evidence freshness checks, weekly cloud and code scans, quarterly access reviews, and annual risk assessments without requiring manual user intervention. Core capabilities include: - Automated evidence collection across 60+ native integrations (AWS, GCP, Azure, GitHub, Okta, CrowdStrike, Datadog, and others), covering 700+ automated checks - Policy generation grounded in actual infrastructure state, with an "overpromise checker" that flags policy claims unsupported by collected evidence - Cryptographically signed evidence artifacts using SHA-256 manifests, RSA/ECDSA signatures, and RFC 3161 timestamps, verifiable outside the platform via an open spec and free CLI tool (Open Attest) - A public Trust Center displaying certifications, policies, and subprocessors - Third-party risk management (TPRM) with vendor tracking, risk tiers, and DPA status - Security questionnaire auto-drafting based on actual controls - Asset inventory tracking for laptops, cloud resources, and SaaS accounts - Employee security training and policy acknowledgment tracking Screenata integrates with Slack for daily compliance briefings and task delegation, and offers a CLI, GitHub App, and MCP server for developer workflows. The platform is priced at $5,988/year (flat rate) and positions itself as a replacement for a combination of a GRC platform and a manual compliance operations role.