Copla

Copla is a Vilnius, Lithuania-based regulatory technology company that provides an Information and Communication Technology (ICT) compliance platform for regulated organizations, particularly in financial services. The platform translates regulatory frameworks — including DORA, ISO 27001, NIS2, PCI DSS, MiCA, SOC 2, the EU AI Act and the Cyber Resilience Act — into guided, evidence-based workflows, breaking requirements into concrete tasks, tracking execution continuously and automatically storing evidence so that organizations remain audit-ready. Controls are cross-mapped between frameworks so that overlapping work is performed once.

The product set includes CoreGuardian (the core compliance management platform), Copla Registry (a reporting tool for maintaining the ICT third-party Register of Information required under DORA Article 28), VendorGuard/VendrIQ for vendor risk assessment and third-party risk management, and an AI-driven CoPilot that delivers education, assessments and alerts to users through Slack and Teams. Copla positions the platform as a replacement for static spreadsheets by keeping asset inventories, vendor lists, risk registers and control libraries updated in real time. Announced alongside the Series A, Copla Bridge is a platform layer intended to let partners, consultants and multi-entity organizations manage compliance across several companies from a single view.

Alongside the software, Copla supplies in-house and fractional CISO expertise and a network of partner providers across Europe to assist with audits, risk decisions and interactions with regulators. Dedicated specialists customize policies to a customer's environment and participate in auditor calls.

Founding story

Copla was founded in 2023 by Aurimas Bakas (CEO), Andrius Minkevičius (CTO) and Nojus Bendoraitis (Chief Legal Officer). Bakas and Minkevičius had previously spent more than a decade building core banking infrastructure and co-founded Paysolut, a banking platform for small and medium-sized fintech banks, which was acquired by SumUp in 2021.

Business model

Copla combines a subscription compliance software platform with human expert services, marketed as an outsourced in-house cybersecurity and compliance team for a monthly subscription. Software automation covers evidence collection, continuous control monitoring, policy generation and framework cross-mapping, while in-house and fractional CISOs, plus a European partner network, handle audits, risk decisions and regulator interactions.

Recurring subscription revenue; the company reports seven-figure annual recurring revenue.

Traction

More than 100 regulated customers across Europe and seven-figure annual recurring revenue as of the February 2026 Series A announcement. The company cites a 4.9 review rating, 80–90% reduction in compliance work for customers, and a case study reporting €60K+ in direct savings and 100% licensing success; customer testimonials describe ISO 27001 certification in three months and DORA plus MiCA audit readiness in weeks.

Latest developments

In February 2026 Copla announced a €6 million Series A led by Iron Wolf Capital with participation from Operator Stack and existing investors Specialist VC, SuperHero Capital, FirstPick, NGL Ventures, Loggerhead Partners and angel investors. Proceeds are allocated to product expansion, team growth and international scaling beyond the EU, including the rollout of Copla Bridge, a layer for managing compliance across multiple entities and partners from a unified view.