New startup ideas · B2B, security and compliance · Security and compliance
startup idea
Complio
An accredited AI compliance officer for small regulated firms, on in-country confidential compute.
Complio runs an AI agent that does the recurring compliance work of small regulated businesses (introducing brokers, clinics, insurance agents, local payment firms): monitoring transactions and records, drafting filings, assembling evidence packs and answering examiner requests.
- AI agent as a service
- Small business
- $10-100B market
- Platform others build on
- Global from day one
3/5
venture judge
6
similar startups, last 2 years (24 all-time)
98%
of 4 nearest real companies still alive
sector
88 public grants in this sector, none matching the idea's terms
Test it before you build it
$1,500 · 5 weeks · 20 prospects
For $1,500 in 5 weeks, prove NFA introducing brokers will prepay a $1,500 pilot for agent-drafted, principal-signed compliance filings, before any rack or accreditation exists.
Riskiest assumption · Principals of small NFA-registered introducing brokers will prepay a real retainer today for agent-drafted filings that their own registered principal reviews and signs, meaning the business works before any accreditation body recognises machine attestations; if the value only exists after accreditation, the idea dies.
1Focus group: who and where
The principal or CCO of an NFA-registered introducing broker, 2 to 20 people, who pays an outside consultant a retainer or annual fee for the AML independent review and the NFA annual questionnaire, with the next review due this cycle
where to find 20 · The NFA BASIC public registry, a downloadable list of every registered IB with principals named; NIBA, the National Introducing Brokers Association, through its member calls and events; FIA Expo in Chicago this fall, where small futures firms and their consultants gather in one hall
2Sell first, build later
A 90-day design-partner pilot: Complio drafts the firm's recurring NFA filings and assembles the evidence packs from its records, the firm's registered principal reviews and signs everything, first deliverable within 30 days of payment
the ask · $1,500 prepaid for the 90-day pilot, converting to $500 per month after
a real yes · A paid $1,500 pilot invoice with a signed pilot order and a dated start is a yes; interest in 'the accredited version when it exists', an unpaid trial, or a consultant's compliment on the sample pack is a no
3Small experiments
The first one attacks the riskiest assumption; each ends with a number that says whether to run the next.
1. Compliance spend displacement calls
$250 · 12 days
Book 15 twenty-minute calls with IB principals pulled from NFA BASIC and warmed through NIBA. Map exactly what they pay consultants, in dollars per month, and for which recurring filings, and which one they would hand off first. One founder runs the calls off a fixed script and logs every dollar figure.
keep going if · 10 of 15 pay the equivalent of $400 or more a month to outside compliance help, and at least 8 name the same one or two filings as the handoff
2. Signatory acceptance test
$800 · 15 days
Hand-assemble one AML annual review evidence pack for 3 volunteer firms from their real records under NDA, drafted the way the agent would produce it. Put it in front of each firm's signing principal and outside consultant and ask one question: would you sign on top of this. Pay a futures-compliance consultant for a few review hours to check the packs first.
keep going if · 2 of 3 signing principals say they would sign with only minor edits
3. Prepaid design-partner pilot
$450 · 20 days
Offer 15 firms a 90-day pilot: we draft the next recurring filing and assemble the evidence pack from their records, their registered principal reviews and signs everything, $1,500 invoiced up front. Founder-led, one pilot order document, invoice sent the day of the verbal yes.
keep going if · 4 of 15 principals pay the $1,500 invoice within 14 days
4Collect a deposit up front
Tesla took $1,000 refundable reservations for the Model 3 and $100 for the Cybertruck before building either: the deposit is the measurement, not the revenue.
$1,500
per prospect, refundable
how · A paid design-partner pilot invoiced up front: the firm's principal signs a one-page pilot order and pays the $1,500 invoice, chosen because a small IB can pay a vendor invoice without a procurement cycle but will not touch a consumer-style checkout for compliance work set up: Stripe Invoicing ↗
what it reserves · One of 5 design-partner slots, the firm's filing calendar built first, and the $500 monthly rate locked for the first year
refund · Refunded in full if the firm's registered principal declines to sign the first delivered filing pack.
target · 4 prepaid pilots totaling $6,000 from 15 offers within 35 days
before taking money · Nothing goes to the NFA without the firm's registered principal reviewing and signing it, and no marketing may claim accreditation or recognised-control status before a body has actually granted one.
Go: build it if
4 of 15 principals pay the $1,500 pilot invoice and 2 of 3 signing principals accept the hand-built evidence pack with minor edits: the retainer works pre-accreditation, so build the agent before any rack.
Kill: stop if
Fewer than 2 of 15 pay, or every signatory refuses to sign on agent-drafted work, or median outside compliance spend is under $300 a month so there is no budget to displace: stop.
5 Scripts to run itoutreach message, landing copy, deposit terms · click to open
outreach message
Your AML independent review and the NFA annual questionnaire come around every year, and you are probably paying a consultant a retainer to assemble the same evidence pack from the same records. I am taking 5 introducing brokers into a 90-day pilot: we draft the filings and assemble the evidence pack from your records, your registered principal reviews and signs everything, $500 a month prepaid. Can I get 20 minutes this week to walk through your filing calendar and what you pay for it today?
landing page
Your recurring NFA filings, drafted for your principal's signature $1,500 prepaid for a 90-day pilot: filings drafted, evidence packs assembled, your principal signs everything Claim one of 5 design-partner slots
deposit terms
The $1,500 pilot fee is invoiced up front and covers 90 days: we draft your recurring filings and assemble the evidence packs, and your registered principal reviews and signs everything before it goes anywhere. It reserves one of 5 design-partner slots and locks your rate at $500 a month for the first year. If your principal declines to sign the first delivered pack, the full $1,500 is refunded.
Would you run this test?
One tap. The yes-share feeds the Demand pillar of this idea's score; nobody sees who answered.
Budgets are out-of-pocket estimates for a team of one to three, US market. Size the deposit to the deal, and check the terms before taking money in a regulated line.
Scorecard
One score that balances how trendy the idea is, the demand for it and its potential for 100x, with competition measured relative to every other idea in the catalog. Recent startup trends first, government priorities second.
64
Idea Score, 0-100 · raw 39.7 x 1.61
Active
competition: more crowded than 61% of ideas · headwind x0.70
+0.0
government priorities, secondary (0 matching grants)
Trend
47
Is the wave forming now? 2025-26 entrants vs 2023-24, rounds since 2025, the sector's live-batch direction, the 2026 trend analyst.
- Entrants 2025-26 vs 2023-24 (similar companies)17
- Rounds announced 2025+ in the sector47
- Sector direction (live batch)100
- 2026 trend analyst25
Demand
62
Does anyone want it? YC's current RFS, companies already paid for something similar, the operator judge, founders' yes-rate in decks, readers who would run the test.
- YC asks for it (current RFS: idea / sector)60
- Someone already pays (similar companies, recent / all-time)100
- Operator judge: real pain25
100x potential
64
Can it return a fund? The venture judge (double weight), market-size and moat axes, neighbours still alive, the technologist judge.
- Venture judge50
- Market size axis67
- Moat axis80
- Neighbours still alive60
- Technologist judge75
Score = 100 x cbrt(Trend x Demand x 100x) x (1 - 0.5 x crowding) + government bonus (max 5), calibrated so the 95th-percentile idea scores 90 (order never changes). A geometric mean: a weak pillar cannot be papered over. Percentiles are among the 272 ideas in the catalog; the terms matched were accredited, compliance, officer, regulated, firms, in-country, confidential, recurring.
The idea in full
- What
- Complio runs an AI agent that does the recurring compliance work of small regulated businesses (introducing brokers, clinics, insurance agents, local payment firms): monitoring transactions and records, drafting filings, assembling evidence packs and answering examiner requests. Because supervisors will not let this data leave the jurisdiction, Complio owns and operates attested confidential-compute racks in each country it sells into, and pursues accreditation so its evidence packs are accepted as a recognised control rather than a vendor claim. Other software vendors publish regulator packs and agent skills on Complio, which is how coverage expands past the verticals the founders know.
- Why now
- ComplyBridge is building a Compliance OS for regulated firms and ComplyDo is doing global compliance for enterprises, both funded in the last year, while Inforcer raised $50M in July 2026 specifically to help smaller businesses handle AI and security risk; the small regulated firm still has nobody accountable in the loop.
- Wedge: first customer and entry point
- Introducing brokers and small money-services firms in two jurisdictions: start with one recurring filing type the founder can prove is accepted, priced as a monthly retainer per firm.
- Path to 100x
- Compliance operations for small regulated firms is a $10-100B spend today paid mostly to people, and an accredited agent collapses it to a subscription while the accreditation itself is the barrier. If third-party regulator packs ship on Complio, it becomes the substrate every vertical compliance tool builds against rather than one more app.
- Ceiling
- Regulators keep insisting on a named human signatory per filing, so Complio stays a per-firm assistant seat and never becomes the accountable layer.
- Closest real companies, as the generator saw them
- ComplyBridge, Inc. and ComplyDo sell compliance software to firms that remain solely accountable; Regbase automates corporate filings. Complio differs by holding the accreditation and running the compute itself, so the output carries standing.
- Main risk
- No accreditation body ever recognises machine-produced attestations, leaving Complio as expensive software with a datacentre bill.
Five judges
Each judge scores every idea in the catalog with a named rubric; the venture judge decides whether a card is shown at all (4-5 is venture-grade).
Venture investor
3/5
Owning confidential-compute racks per country before any accreditation body has recognised machine attestations is a capital-heavy bet on a regulator decision outside the founders' control.
Bootstrapper
1/5
Owning confidential-compute racks per country while chasing accreditation nobody has granted yet burns far past $500k pre-revenue.
Operator
2/5
The plan bets on accreditation bodies recognising machine attestations, and per-country confidential compute racks is a datacentre bill before a single retainer.
Technologist
4/5
Owning attested confidential-compute racks per jurisdiction is real infrastructure, though the whole thesis hinges on accreditation bodies that may never recognise machine attestations.
Risk
2/5
The entire model rests on an accreditation no body has granted for machine-produced attestations, while in-country confidential-compute racks burn capital in every jurisdiction.
trends
2/5
Revenue after three years of accreditation-seeking means the compliance RFS window it cites will be settled by ComplyBridge and ComplyDo first.
Similar startups in the directory
Companies whose pitch matches most of the idea's terms (accredited, compliance, officer, regulated, firms, in-country, confidential, recurring): 24 all-time, 6 from the last two years. Same matching as Idea Check.
AI compliance co-pilot for regulated financial businesses
Paxton.ai is a Regulatory Compliance Platform powered by Generative AI
ComplyBridge — The Compliance OS for Regulated Firms
AI-native workspace for AEC
AI Licensing Agent for Regulated Industries
The AI drawing review platform for architects and engineers.
New Range offers a holistic platform for financial compliance and trade reporting.
Black Owl Systems simplifies lease accounting for businesses of any size by offering software that automates calculations, reporting, and integrates with other business systems.
Compliance and back office workflows for Wealth Managers.
Modern OS for the financial back office.
AI back office for food product quality teams
AI-native operations for the banks
The generator's reference companies
Real companies the model named as closest when it wrote the card, with their fate. A check mark is a company the radar could verify in its directory.
Public money in this direction
US federal grants, SBIR/STTR awards and open opportunities from the radar's public-money feed, matched to the idea's terms; the sector totals give the context.
0
grants and programs matching the idea
88
startup-relevant grants in Security and compliance
$41M
awarded in the sector, tracked
13
opportunities open now in the sector
Market signal
What the radar sees in Security and compliance: new companies by cohort year, the forming YC batch, and outcomes since the February snapshot.
Security and compliance · 43 → 45 → 83 → 74 → 47 new companies 2022 → 2026 · 94% aliveYC F26 live: 5 in this cluster, 4% of the batch (was 3% in S26)Since February, of 171 YC companies here: 2 acquired, 2 shut down, 27 rewrote their pitch
Design attributes
The card is one cell of a designed set: every axis below was chosen before the text was written, and the text had to realize it.
- Buyer
- Small business
- Business model
- AI agent as a service
- Path to 100x
- Platform others build on
- Market size
- $10-100B market
- Capital intensity
- Capital-heavy (hardware, bio, infra)
- Speed to revenue
- R&D first, revenue after 3 years
- Technical depth
- Real engineering
- Go-to-market
- Founder-led sales
- Moat
- License or regulatory moat
- Geography
- Global from day one
- Regulation
- Heavily regulated
- Vibe
- Hot space
Listed under
An idea sits in its own sector and in any sector its text clearly touches.
More ideas like this
B2B, security and compliance · Security and compliance
Claimyard
Marketplace turning scam, fraud and privacy losses into funded, aggregated consumer claims.
A consumer uploads what happened, screenshots of a romance scam, an unauthorized P2P transfer, a data misuse notice, and a no-code intake agent classifies the claim, pulls the paper trail from the bank or platform, and posts it to a marketplace of licensed attorneys, arbitration filers and litigation funders who bid to take it on contingency.
B2B, security and compliance · Security and compliance
Sentinet
Shared-defense agent for small firms: one member's confirmed fraud warns the whole network.
Sentinet connects in an afternoon to an SMB's mailbox, accounting system and bank feed, and runs an agent that screens invoices, vendor bank-detail changes and unusual logins.
B2B, security and compliance · Security and compliance
Vouchline
One AI agent answers your security questionnaires and reviews the ones you send.
Vouchline is an agent that sits on both sides of the vendor security review: for a small supplier it reads the buyer's questionnaire, pulls evidence from Drive, ticketing and cloud consoles, and returns a completed response in a day; for the buyer it reads incoming responses and flags the answers that contradict prior filings.
B2B, security and compliance · Security and compliance
Attestral
Agents that prove and verify vendor security continuously, replacing the questionnaire.
Attestral deploys agents inside an enterprise's stack that collect live control evidence and answer any customer's security review automatically; on the buying side, its agents interrogate a vendor's agents and check every claim against machine-readable evidence rather than prose.
B2B, security and compliance · Security and compliance
Codewarden
Continuous security for the AI-written software small businesses now run on.
Codewarden is a self-serve subscription platform that continuously scans, exploits and patches the AI-generated applications small businesses now build and deploy without security staff.
B2B, security and compliance · Security and compliance
Ironvane
Autonomous security operations agents that managed service providers resell and extend.
Ironvane gives managed service providers a runtime where security agents triage alerts, patch endpoints, revoke credentials and close tickets across their whole book of small business clients, with the provider approving actions rather than performing them.
Fictional company written 2026-08-23 from MarkosWeb data; the companies, grants and numbers around it are real and tracked. Treat the idea as a research prompt, not a plan.