New startup ideas · B2B, security and compliance · Security and compliance

startup idea

Certiva

Accredited AI conformity assessment sold as a continuous enterprise subscription.

Certiva builds a certification scheme for enterprise AI systems and gets itself accredited as the assessment body that issues the certificate, then sells enterprises a subscription that keeps the certificate live.

Software subscription
Enterprise
$1-10B market
Creates a new category
Global from day one

3/5

venture judge

similar startups, last 2 years (40 all-time)

98%

of 4 nearest real companies still alive

yes

8 matching federal grants and programs

Direction supported by government programs and grants

Test it before you build it

$2,000 · 6 weeks · 25 prospects

For $2,000 and six weeks, prove that three US enterprises already paying for hiring-AI bias audits will sign and put $2,500 down on a $30,000 continuous certification from a body that is not yet accredited.

Riskiest assumption · Compliance leaders who already pay for annual AI hiring audits will commit money to a certification scheme from a body whose accreditation is still pending, rather than waiting for accreditation or for an incumbent audit firm.

1Focus group: who and where

The compliance, employment-law or AI governance lead at a US enterprise (5,000+ employees) that uses automated employment decision tools and had to commission and post a NYC Local Law 144 bias audit in the past 12 months, and is now staring at the next annual evidence scramble.

where to find 25 · Public Local Law 144 audit summaries posted on employers' career pages plus the published audit portfolios of BABL AI and Holistic AI (a self-selecting directory of buyers who already paid for an AI audit); IAPP KnowledgeNet chapter meetings and the IAPP AI Governance Professional community, where these leads congregate; the HR Technology Conference and Expo in Las Vegas this September, where HR compliance owners walk the floor.

2Sell first, build later

A founding design partner seat: shape the certification criteria for AI used in hiring, get one named AI system assessed quarterly by Certiva's assessor starting within 30 days of signing, and be first in line for the certificate the day accreditation is granted.

the ask · $30,000 per year per certified system at the design partner rate, against a planned $50,000 list price

a real yes · A real yes is a countersigned design partner agreement plus a paid $2,500 invoice with a kickoff date on the calendar; compliments, unpaid advisory board seats, NDAs and requests to circle back after accreditation do not count.

3Small experiments

The first one attacks the riskiest assumption; each ends with a number that says whether to run the next.

1. Fifteen audit-pain calls
$150 · 10 days
Build a list of 25 companies from posted LL144 audit summaries and auditor portfolios, then book 15 calls through IAPP chapter contacts and direct email. The founder runs every call with one script: what did last year's audit cost in fees and internal hours, who chased the evidence, and would a certificate that stays live through connectors replace that. Cost is list-building tools and call scheduling.
keep going if · 6 of 15 calls confirm $50,000+ per year in audit fees plus internal evidence work and agree to review a design partner scope
2. Priced scheme spec offer
$350 · 14 days
Write a 12-page outline of the hiring-AI certification scheme (criteria, evidence connectors, assessor sign-off cadence) plus a one-page design partner offer: $30,000 for year one, four seats, kickoff within 30 days, $2,500 to reserve. Send it to everyone who took a call and ask for the reservation on a follow-up call.
keep going if · 3 of 10 recipients redline the agreement or route it to procurement within 10 days of receiving it
3. HR Tech in-person push
$1,500 · 7 days
Take an expo pass to the HR Technology Conference and Expo in Las Vegas and pre-book meetings with LL144-audited employers attending, using the scheme spec as the meeting hook. Push the two warmest prospects from the calls to sign on site.
keep going if · 8 booked meetings held, of which 2 advance to a scheduled procurement or legal review

4Collect a deposit up front

Tesla took $1,000 refundable reservations for the Model 3 and $100 for the Cybertruck before building either: the deposit is the measurement, not the revenue.

$2,500

per prospect, refundable

how · A paid design-partner agreement: a two-page scope signed by the compliance lead, with a $2,500 mobilization invoice paid up front and credited against the $30,000 year-one fee; where procurement cannot move money in six weeks, accept only a signed LOI with a dated kickoff and named participants, and count it separately from paid seats. set up: Stripe Invoicing ↗

what it reserves · One of four design partner seats, the $30,000 founding price locked for two years, and first-certified status when accreditation lands

refund · Refunded in full if the scheme specification is not delivered by November 1, 2026 or the partner withdraws before the kickoff workshop.

target · 3 paid $2,500 reservations from 25 prospects within 6 weeks

before taking money · Do not call Certiva accredited, issue any certificate, or imply regulator recognition before an accreditation body such as ANAB grants status; until then sell only participation in scheme design and assessment dry runs.

Go: build it if

3 signed design partner agreements with $2,500 paid each ($7,500 collected) and at least 6 of 15 calls confirming $50,000+ annual audit spend, within 6 weeks

Kill: stop if

Zero paid reservations and fewer than 2 signed LOIs after 20 completed conversations and 3 procurement reviews, or fewer than 4 of 15 calls confirming the audit-cost pain

5 Scripts to run itoutreach message, landing copy, deposit terms · click to open

outreach message

You published a bias audit for your hiring AI this year, which means someone on your team ran the evidence hunt by email and spreadsheet. I am building Certiva, a certification for AI used in hiring decisions that stays current through connectors instead of an annual scramble, and I am selecting four design partners to shape the scheme. The seat is $30,000 for the first year, $2,500 to reserve it, credited in full. Can I take 20 minutes this week to walk you through the scheme outline?

landing page

Certification for hiring AI that stays current every day $30,000 a year per certified system, four design partner seats, $2,500 reserves yours Reserve a design partner seat

deposit terms

Your $2,500 mobilization fee reserves one of four design partner seats and is credited in full against the $30,000 first-year fee. It is refunded in full if the scheme specification is not delivered to you by November 1, 2026, or if you withdraw before the kickoff workshop. Kickoff happens within 30 days of signature.

Would you run this test?

One tap. The yes-share feeds the Demand pillar of this idea's score; nobody sees who answered.

Budgets are out-of-pocket estimates for a team of one to three, US market. Size the deposit to the deal, and check the terms before taking money in a regulated line.

Scorecard

One score that balances how trendy the idea is, the demand for it and its potential for 100x, with competition measured relative to every other idea in the catalog. Recent startup trends first, government priorities second.

Idea Score, 0-100 · raw 38.7 x 1.61

Crowded

competition: more crowded than 85% of ideas · headwind x0.57

+3.5

government priorities, secondary (32 matching grants)

Trend

Is the wave forming now? 2025-26 entrants vs 2023-24, rounds since 2025, the sector's live-batch direction, the 2026 trend analyst.

Entrants 2025-26 vs 2023-24 (similar companies)70
Rounds announced 2025+ in the sector47
Sector direction (live batch)100
2026 trend analyst50

Demand

Does anyone want it? YC's current RFS, companies already paid for something similar, the operator judge, founders' yes-rate in decks, readers who would run the test.

YC asks for it (current RFS: idea / sector)60
Someone already pays (similar companies, recent / all-time)100
Operator judge: real pain50

100x potential

Can it return a fund? The venture judge (double weight), market-size and moat axes, neighbours still alive, the technologist judge.

Venture judge50
Market size axis33
Moat axis80
Neighbours still alive56
Technologist judge25

Score = 100 x cbrt(Trend x Demand x 100x) x (1 - 0.5 x crowding) + government bonus (max 5), calibrated so the 95th-percentile idea scores 90 (order never changes). A geometric mean: a weak pillar cannot be papered over. Percentiles are among the 272 ideas in the catalog; the terms matched were accredited, conformity, assessment, sold, continuous, enterprise, subscription, builds.

The idea in full

What: Certiva builds a certification scheme for enterprise AI systems and gets itself accredited as the assessment body that issues the certificate, then sells enterprises a subscription that keeps the certificate live. The product is a no-code evidence layer: connectors into model registries, ticketing, HR and cloud logging that continuously collect the artifacts an auditor would otherwise request by email, plus a field team of assessors who sign off. Buyers are compliance and risk leaders at global enterprises shipping AI into regulated workflows; they pay per certified system per year, not per audit hour.
Why now: YC's Fall 2026 Requests for Startups name AI-Native Compliance Infrastructure as a theme, and the cluster added 23 new companies in 2026 alone, including ComplyDo (Global Compliance for Enterprises), Regbase (Automating Corporate Compliance, Worldwide) and Inth (Enterprise privacy governance for companies that ship fast), all attacking the evidence side while nobody holds the accreditation that makes the evidence count.
Wedge: first customer and entry point: One narrow scheme first: AI systems used in hiring and workforce decisions at multinationals, where three or four named enterprise design partners fund the scheme's development while accreditation is pending, and the founder personally runs every sale.
Path to 100x: AI assurance and certification is a $1-10B market forming now, and certification markets concentrate: once a scheme is recognized by regulators and demanded in procurement, the body that issues it holds a licensed position competitors cannot copy in software. Certiva creates the category of a certificate that is renewed continuously by connectors instead of annually by fieldwork, which turns a one-off audit fee into recurring subscription revenue at software gross margin.
Ceiling: If assessor headcount rather than connectors carries the workload, revenue tracks people and the company caps out as a boutique audit firm.
Closest real companies, as the generator saw them: ComplyDo and Regbase automate compliance paperwork but hand the file to a third-party auditor; Inth governs privacy internally; Probo helps companies get compliant. Certiva is the body that issues the certificate, so the subscription is the audit rather than preparation for one.
Main risk: Accreditation takes longer than the runway, and an incumbent audit firm gets the same scheme recognized first.

Five judges

Each judge scores every idea in the catalog with a named rubric; the venture judge decides whether a card is shown at all (4-5 is venture-grade).

Venture investor
3/5
Accreditation is a real licensed moat competitors cannot code around, but assessor field teams tie revenue to headcount in a $1-10B market.
Bootstrapper
1/5
Accreditation as an assessment body is a multi-year regulatory path with a field team of assessors, funded entirely before the first renewal.
Operator
3/5
Enterprises already pay audit fees so willingness to pay is proven, but revenue waits on accreditation that a regulator, not the buyer, must grant.
Technologist
2/5
The barrier is an accreditation licence, not technology; the product itself is connectors into model registries and ticketing that ComplyDo already builds.
Risk
3/5
An accreditation moat is real once earned, but pending accreditation plus three or four funding design partners and founder-run sales stacks three single points of failure.
trends
3/5
Rides the AI-Native Compliance Infrastructure RFS and a 23-company 2026 cohort building evidence tooling, but no dated regulation in the brief forces certification demand yet.

Similar startups in the directory

Companies whose pitch matches most of the idea's terms (accredited, conformity, assessment, sold, continuous, enterprise, subscription, builds): 40 all-time, 21 from the last two years. Same matching as Idea Check.

Zesty.aiplugandplay · Fintechalive
ZestyAI provides AI-driven insights for smarter insurance underwriting and risk management.
Edaraplugandplay PnP 2026 · 2026 · B2B SaaSalive
Edara is building an AI-powered execution system for physical ICT infrastructure delivery work.
Rexyc S26 · 2026 · Vertical AI agentsalive
AI-native BPO for enterprise order-to-cash
Proper Motionspeedrun SR007 · 2026 · Agent infrastructurealive
The continual learning layer for every agent.
Othellospeedrun SR007 · 2026 · Vertical AI agentsalive
Othello builds AI models for B2B sales calls, deploying agents to give real-time prompts to sellers.
Dialogusyc S26 · 2026 · Agent infrastructurealive
The AI-native contact center
Agency Tool Companyyc S26 · 2026 · Robotics and physical worldalive
Reliable infrastructure to build, deploy and manage real-world robots.
Hypercubicplugandplay PnP 2026 · 2026 · Vertical AI agentsalive
Hypercubic is building the best-in-class agentic AI platform for maintaining and modernizing legacy mainframe systems running COBOL.
Collinear AIplugandplay PnP 2026 · 2026 · Agent infrastructurealive
Collinear AI provides enterprise-grade AI safety and reliability through AI “Judges” that assess, guard, and improve model behavior in real time.
HoneyHiveplugandplay PnP 2026 · 2026 · Agent infrastructurealive
Modern AI Observability and Evaluation. Your single platform to observe, evaluate, and improve AI agents — whether you're just getting started or scaling agents across your enterprise.
Echelon AIplugandplay PnP 2026 · 2026 · Vertical AI agentsalive
Echelon builds AI agents that own the full ServiceNow development lifecycle, including design, planning, build, migration, enhancement, and testing.
Oumiplugandplay PnP 2026 · 2026 · AI infra and computealive
Oumi is the AI engineering platform that builds and continuously improves specialized models and agents.

Run this as an Idea Check →

The generator's reference companies

Real companies the model named as closest when it wrote the card, with their fate. A check mark is a company the radar could verify in its directory.

Public money in this direction

US federal grants, SBIR/STTR awards and open opportunities from the radar's public-money feed, matched to the idea's terms; the sector totals give the context.

grants and programs matching the idea

startup-relevant grants in Security and compliance

$41M

awarded in the sector, tracked

opportunities open now in the sector

I-Corps: Translation potential of a cognitive artificial intelligence (AI) method that estimates and mitigates recall risk of phishing threatsawardhigh relevance
National Science Foundation · I-Corps · $50K · posted 2026-08-17
MOSAIC II: A Randomized Clinical Study of the MAP Wound Matrix to Reduce Time to Graft-Readiness after Non-Melanoma Skin Cancer Resectionawardhigh relevance
NIH / NCI · SBIR phase II · $1M · posted 2026-09-18
Optimization of an at-home continuous multi-domain monitoring and assessment system to improve Alzheimer's and related disorders clinicaltrialsawardhigh relevance
NIH / NIA · SBIR phase II · $964K · posted 2026-09-07
Auxigen: BIO – An Adaptive, AI-Driven Commercialization Training Platform for Biomedical Researchersawardhigh relevance
NIH / NIGMS · SBIR phase I · $309K · posted 2026-09-01
I-Corps: Translation Potential of a Privacy-Aware Stress Sensing and Conversational Companionawardhigh relevance
National Science Foundation · I-Corps · $50K · posted 2026-08-19
I-Corps: Translation Potential of Flexible Electronics for Next-Generation Wearable Cardiac Diagnosticsawardhigh relevance
National Science Foundation · I-Corps · $50K · posted 2026-08-19
I-Corps: Translation Potential of Quantum-Artificial Intelligence (AI) in Energy and Infrastructure Security and Resilienceawardhigh relevance
National Science Foundation · TIP-CHIPS KTA-3 Quantum · $50K · posted 2026-08-17
Enhancing Peer Diagnostic Support for Rural Clinicians via Collective Intelligence and Adaptive Machine Learningawardhigh relevance
NIH / NIMHD · STTR phase I · $349K · posted 2026-08-09

All public money by sector →

Market signal

What the radar sees in Security and compliance: new companies by cohort year, the forming YC batch, and outcomes since the February snapshot.

Security and compliance · 43 → 45 → 83 → 74 → 47 new companies 2022 → 2026 · 94% aliveYC F26 live: 5 in this cluster, 4% of the batch (was 3% in S26)Since February, of 171 YC companies here: 2 acquired, 2 shut down, 27 rewrote their pitch

Security and compliance: companies, trend and grants →

Design attributes

The card is one cell of a designed set: every axis below was chosen before the text was written, and the text had to realize it.

Buyer: Enterprise
Business model: Software subscription
Path to 100x: Creates a new category
Market size: $1-10B market
Capital intensity: Capital-medium (ops, field teams)
Speed to revenue: R&D first, revenue after 3 years
Technical depth: Integrations, no-code
Go-to-market: Founder-led sales
Moat: License or regulatory moat
Geography: Global from day one
Regulation: Heavily regulated
Vibe: Boring business