HelmGuard, a London-based startup building an agentic platform for governance, risk, and compliance, has closed a $7.3 million seed round as it looks to replace slow, document-heavy assurance work with AI systems that inspect risk at the source.
The financing was co-led by Infinity Ventures and Frontline, with additional participation from FinTech Collective, Stage 2 Capital, and Entrepreneurs First.
The company was founded in 2024 by chief executive John Daley, a former Palantir executive, and chief technology officer Jack Miller, an AI researcher.
Their product is aimed at regulated industries such as financial services, insurance, healthcare, and industrials, where compliance teams still spend much of their time chasing questionnaires, vendor reports, and internal evidence rather than making decisions.
HelmGuard’s pitch is that specialized agents can connect to source systems, gather signals continuously, and compress assessment cycles that once stretched across weeks into a matter of hours.
Traditional GRC tools often function as systems of record.
They store policies, track attestations, and generate audit artifacts, but they still depend on people to collect the underlying facts.
HelmGuard instead unifies fragmented risk, security, and compliance data from unstructured documents and live operational systems, then uses agents to automate third-party reviews, control-gap analysis, and assurance workflows.
Outputs are synthesized into a single view, with citations and reasoning traces so reviewers, auditors, and regulators can see how a conclusion was reached. Human sign-off remains part of the process.
Daley has argued that many existing platforms were built to document work rather than to change how work gets done.
In his view, agents should go directly to systems of record, cut out repetitive collection, and free teams from the thousands of hours that evidence gathering consumes each year.
The new capital, he said, will help take that model to a wider set of customers and extend it to the growing problem of governing other AI agents already being deployed across enterprise workflows.
That second frontier is becoming more urgent as organizations put autonomous software into production.
Model updates, new tools, and changing permissions can alter an agent’s risk profile between certification cycles, making periodic paperwork a poor snapshot of current behavior.
Miller has described the company’s Verified Risk Network as an attempt to change the unit of assurance itself: instead of exchanging static documents, organizations would exchange claims that agents have assessed continuously, including agent-to-agent verification.
A planned assurance layer is intended to evaluate agent behavior at runtime rather than after the fact.
HelmGuard also frames its product as a shared network, not only an internal dashboard.
Once a company is verified on the platform, that evidence can be reused with counterparties, reducing the familiar cycle in which the same security questionnaire is answered again and again.
The firm already lists customers in security and compliance teams at both established enterprises and startups, including organizations using the platform to stand up GRC programs rather than merely retrofit them.
Proceeds from the round will fund a larger US footprint, including New York and San Francisco alongside the London headquarters, plus hiring in engineering and go-to-market and further work on agent assurance.
The team has grown from a handful of founders to a broader early-stage organization and has signaled plans for a later Series A. The bet is that compliance will shift from periodic paperwork to continuous, source-level verification—and that the companies that can make that shift operational will own a much larger share of enterprise risk work.