A €3 billion market growing at 15% CAGR, driven by regulation and mid-market expansion
The global GRC software equipped market stands at approximately €3bn in 2025 and is expected to double to approximately €6bn by 2030, implying a 15% CAGR. Growth is fueled by rising regulatory pressure including demand for AI governance tools ahead of the EU AI Act, and by accelerating mid-market adoption, with mid-market companies and SMBs expected to grow at a 21% CAGR from 2025 to 2030, compared to approximately 7% for large enterprises.
What the report covers
Dedale Intelligence's Private Market Leader 360 on Riskonnect is built on 20 primary expert interviews conducted across Riskonnect alumni, competitor executives at ServiceNow, OneTrust, and Workiva, and customers including the Head of Risk Management at Roche. The report covers:
- GRC market definition and framework. What GRC software is, what it enables, and what triggers adoption across enterprises of all sizes, including the full platform functionality map across governance, risk and compliance processes, and risk and compliance areas from IT risk and TPRM to ESG, business continuity, and AI governance.
- Riskonnect's business and financials. Founded in 2007, PE-backed by Thoma Bravo since 2017, with $231m in FY2024 revenue and 1,014 FTEs as of November 2025. Revenue split: 70% software, 30% services. Geography: 56% US, 44% international. ACV ranging from approximately $70k to $100k for mid-market to approximately $150,000 to $300,000 for enterprise. Seven acquisitions since 2018 expanding from insurable risk into core GRC, ESG, business continuity, and global reach.
- Customer definition and use case. Riskonnect's sweet spot is upper mid-market and enterprise organizations with complex, multi-entity risk exposure. Key decision makers span CRO, CCO, CISO, COO, and Board-level stakeholders depending on the module. The report includes a detailed customer use case at Roche, a global pharma company using Riskonnect across all modules since 2013 with a satisfaction score of 8.5 out of 10 and an annual GRC budget of approximately €1m.
- Competitive landscape and comparative assessment. Riskonnect competes with Archer, ServiceNow, and MetricStream in the enterprise tier, and faces Navex, AuditBoard, Diligent, and Workiva across specific functional areas. The report includes a full eight-criterion comparative assessment covering breadth and depth of functionality, integration, automation, configurability, ease of use, customer support, and total cost of ownership.
- AI capabilities. AI has the potential to reshape GRC across real-time risk management, compliance automation, and tool interaction. ServiceNow leads in overall AI functionality. Riskonnect stands out for its advanced multi-modal simulation module and launched a dedicated AI governance suite in July 2025 incorporating the EU AI Act, GDPR, ISO 42001, and NIST AI RMF frameworks.
- Growth opportunities and risks. Three growth opportunities: continued M&A at up to three acquisitions per year, AI governance demand driven by the EU AI Act, and channel partnerships targeting 30% of revenues. Three structural risks: M&A integration complexity creating technical debt in the bolt-on architecture, competitive pressure from agile mid-market challengers, and high consultant turnover alongside a limited internal R&D team.
Request access to the full report.
