With the growing importance of security compliance for startups, more companies are seeking to achieve and maintain compliance with frameworks like SOC 2, ISO 27001 and GDPR. Bubba AI, Inc. is building a comprehensive solution for these organisations to easily integrate compliance workflows and build their own customised processes through an open-source alternative to existing GRC (Governance, Risk, and Compliance) automation platforms.
The company is positioning itself to address the compliance needs of organisations ranging from early-stage startups to established enterprises. Bubba AI’s flagship product, Comp AI, offers a built-in risk register, and policies required for frameworks while also allowing companies to build their compliance workflows using building blocks provided by the platform.
Introducing Comp AI
Comp AI is an open-source alternative to GRC automation platforms like Vanta and Drata. The platform includes several key features designed to automate compliance with frameworks such as SOC 2:
- A built-in risk register to help companies identify, document, and assess potential security risks
- Out-of-the-box security policies for modern companies, complete with an AI-powered editor for customisation
- A comprehensive vendor management suite for tracking, assessing, and identifying third-party vendors
- Automated evidence-collection tools that reduce the manual burden of compliance documentation
The open source nature of Comp AI differentiates it from existing solutions in the market, allowing for greater community involvement, customisation, and cost savings for companies on their compliance journey.
More from News
- Experts Comment: Did The Autumn Budget Give UK Startups And Scale-Ups What They Asked For?
- Microsoft Is Reportedly Offering To Pay Staff To Leave While Pouring Billions Into AI – What Does It Say About Big Tech’s Priorities?
- Tairex Launches Multidisciplinary Human-Agent Collaboration Ecosystem To Advance AI Adoption in Real-World Clinical Settings
- I Woke Up To A Meta Account. When Did I Agree To That?
- Vidoser Launches AI-Powered Platform To Streamline Creator Marketing For Brands And Agencies
- Office Freedom Named Agency Of The Year And Deal Of The Year 2026
- A “Power Event” At Google Cloud’s London Region Affected Revolut And European Banks – What Happened?
- Anchor Launches Action Index, Cutting Computer-Use Agent Token Costs By 100X
The Value of Open Source Compliance Solutions
Bubba AI was founded in late 2024 by Lewis Carhart. Carhart recognised a significant gap in the market for affordable, flexible compliance automation tools that could serve the needs of a wide range of companies.
“While building at previous companies, I experienced firsthand how painful and resource-intensive the compliance process can be, especially for smaller organisations. The existing solutions were either prohibitively expensive or lacked the flexibility we needed. I wanted to create an open source platform that democratises access to compliance automation”, Lewis Carhart commented.
This experience led Carhart to develop Comp AI as an open source alternative that could help organisations of all sizes achieve SOC 2 compliance without breaking the bank or getting locked into proprietary systems.
The Ambitious Goal
Bubba AI has set an ambitious target: helping 100,000 companies achieve compliance with cyber security frameworks like SOC 2, ISO 27001 and GDPR by 2032. This goal reflects the growing importance of security certifications as businesses increasingly handle sensitive customer data and face stricter regulatory requirements.
“We believe that strong security practices shouldn’t be a luxury that only well-funded companies can afford. By providing an open source solution, we’re removing barriers to entry and empowering organisations to build robust security programs regardless of their size or resources”, said Lewis Carhart.
The company plans to build a community around its open-source platform, encouraging contributions and extensions that can benefit the broader business ecosystem.
