Arden

Market position

Arden targets the internal audit and SOX automation market, which it describes as large but underserved: every US public company must perform SOX testing, at an average cost of about $2 million per year, of which more than 70% is labor, with overflow work outsourced to consulting firms at $500-1,000 per hour. Incumbent GRC platforms AuditBoard and Workiva are positioned as complementary systems of record, while AI-native SOX automation competitors cited include Bead AI, Andera and Oxus.

Arden combines API integrations for modern systems with computer-use agents that operate legacy interfaces, addressing evidence sources that API-only tools cannot reach. It executes tests rather than storing workpapers, positioning itself alongside GRC platforms such as AuditBoard and Workiva rather than replacing them, and supports full-population testing instead of statistical sampling of a small number of records. Other stated differentiators include identity resolution across systems with plain-English reasoning, read-only default access, audit-grade traceability linking each conclusion to the field, file and timestamp behind it, and a delivery model led by ex-Big 4 professionals and AI engineers.

Technology

AI agents combining direct read-only API integrations with more than 20 enterprise systems and computer-use agents that navigate legacy ERP interfaces, web applications, Slack and Teams to capture screenshots, logs and approvals. A testing engine supports full-population or sample-based testing against the customer's risk and control matrix, with automatic identity resolution when the same employee appears under different names across systems and plain-English reasoning for each decision. Security controls include AES-256 encryption at rest, TLS 1.2+ in transit, SAML SSO, 24/7 monitoring, isolated AWS infrastructure with dedicated Postgres instances, configurable access and retention, single-tenant deployment options, and a commitment not to train models on customer data.

Go-to-market

Enterprise, founder-led sales with a demo booking on the company website and no self-serve sign-up. The Y Combinator launch post solicits introductions to VPs of Internal Audit, chief audit executives and SOX directors at public companies, CFOs and controllers at public and pre-IPO companies, and contacts at Big 4 and mid-tier firms doing co-sourced SOX work. Onboarding is described as roughly an hour, after which customers grant read-only credentials for in-scope systems.

Internal audit, SOX and finance functions at US public companies, including VPs of internal audit, chief audit executives, SOX directors, CFOs and controllers at public and pre-IPO companies, plus Big 4 and mid-tier firms performing co-sourced SOX work. The company emphasizes environments where security requirements are strict.

Geography

Headquartered in San Francisco. Product coverage is focused on US SOX compliance, and companies needing non-US regimes such as DORA or CSRD are described as outside current scope.

History

Arden was founded in 2026 by Aryaman Khanna and David Lomelin, who have known each other since sixth grade and previously collaborated on research into LLM reliability. The company took part in Y Combinator's Spring 2026 batch, is based in San Francisco, and had a team size of two as of that listing. Its website announces a $3.7 million raise to transform audit and accounting, and an independent SOC 2 audit was underway with SOC 2 Type I in progress as of May 2026.

Risks & controversies

SOC 2 Type I was in progress but not completed as of May 2026, which can block procurement at enterprises with formal vendor security requirements. Pricing is not published and evaluation requires a demo call, limiting self-serve adoption. Product coverage is limited to US SOX compliance and does not extend to other regimes such as DORA or CSRD. The company was also small, with a listed team size of two.