Ethyca

Market position

Ethyca competes in the data privacy, governance, risk and compliance software market and positions itself against traditional, form-based governance tooling that it argues cannot keep pace with LLM and agentic AI adoption. It cites its open-source Fides project as a widely used taxonomy for data governance and privacy, with the IAB describing Fides as providing a standard for personal data governance across the advertising technology ecosystem and the IAPP commenting on the Fides developer tools.

The company differentiates on runtime, purpose-based enforcement at the point of data access rather than periodic documentation and manual review; on an open-source, machine-readable policy standard (Fides) shared across legal, product and engineering teams; and on unifying data discovery, risk assessment, consent, rights fulfillment and AI usage controls in a single governance layer.

Technology

Fides is an open-source taxonomy and programming language for sensitive data that expresses data categories, use purposes and policy logic in machine-readable form; the company describes Fideslang as an open taxonomy covering categories such as user contact, biometrics, demographic, government ID and health data, and uses including essential service, analytics, personalization, advertising and disclosure, with custom extensions for sensitivity and risk. Helios performs automated scanning and classification across warehouses (Snowflake, BigQuery), websites (cookies, tags, SDKs) and infrastructure (AWS, IdP). Janus provides fine-grained consent and preference management supporting frameworks including GDPR and CCPA. Lethe executes policy-driven deletion, de-identification, tokenization and retention. Astralis performs runtime policy evaluation, including purpose inference and query rewriting through an MCP gateway that checks every agent call before execution.

Go-to-market

Direct enterprise sales supported by demo requests and consultations on the company website, with an open-source distribution motion around Fides and its GitHub project serving as a developer-facing entry point. Customer case studies, published research and news content support the funnel, and the company states it has built a full go-to-market team for enterprise scaling.

Global enterprises and large-scale organizations with complex, multi-region data ecosystems, spanning publishing, fintech, internet software, consumer technology and retail. Named customers include The New York Times, Ramp, SurveyMonkey, Lush, WeTransfer, Vercel, Axios, Snackpass, Parachute and Slice, with Axios, Mozilla, Ramp and Remitly added shortly before the December 2024 round. Buyers span legal, compliance, security, engineering and data teams.

Geography

Headquartered in New York, United States, serving global enterprises with multi-region privacy enforcement that adapts to regional regulations; referenced customers operate internationally, including Lush with over 900 stores in more than 50 countries.

History

The company describes its founding year as 2018, when it was created to operationalize GDPR as code and launched its first platform for automated privacy requests, with early traction among direct-to-consumer brands and a $4.2M seed round. In 2021 it released Fides 1.0, described as the first open-source privacy engineering toolkit, backed by a $13.5M Series A. Fides 2.0 followed in 2022, adding a visual UI and enterprise features for governance and security teams. In 2023 the company introduced Janus and additional services, positioning itself as an enterprise platform. In 2024 it added Helios and Astralis, extending the stack to data detection and enforcement, and in December 2024 announced a $10M round bringing total capital raised to over $37M. The company frames 2025 as a period of enterprise scaling with a full go-to-market team.