WillItSurvive
Accounting, tax and business software · subsidiary of Symphony Technology Group · United States

SAI360

Maker of ethics, risk, and compliance software used by large enterprises worldwide.

Losing its protection
Assessed 22 July 2026 · Evidence as of 22 July 2026
The structural protection is eroding.
On the recordSince 22 July 2026 · Checkable from Q3-Q4 2026 · Every call on the record Checkpoint: First full sales cycle after GRC Elevate 6.0 launch and Plural Policy integration shows whether it wins new logos, not just retains old ones
The call

SAI360 keeps its current customers locked in with years of compliance data, but bigger AI-equipped platforms are already out-competing it for new business while its PE owner looks toward an exit.

SAI360 sells compliance and audit management software to large companies across many countries. The company has real staying power with existing customers because they have years of audit data locked into the system and switching costs are high, but this does not protect SAI360 from new competition. ServiceNow and IBM OpenPages, both massive software platforms with more resources, are now selling their own governance modules and winning business from SAI360's own customer base. Additionally, artificial intelligence can now do much of what SAI360 hired Plural Policy to protect: reading regulations and policy documents automatically, which SAI360 implicitly admitted was becoming commoditized. The one thing that changes the outlook is whether ServiceNow can actually flip SAI360's existing customers to its platform in the next 12 to 18 months. If that happens, and if the private equity owner moves to sell the company quickly, the sale price likely drops significantly.

Why
01
AI pressure: ServiceNow and IBM OpenPages embedded GRC AI. AI-driven policy scanning and risk workflows are becoming standard features, and SAI360 had to buy Plural Policy just to keep up on that front. Could AI do the core job? Only partly.
02
Bigger players: ServiceNow (GRC module) and IBM OpenPages. Both are bigger, better funded, and already pulling ahead in reviews and deal volume; ServiceNow gets over twice the Gartner Peer Insights reviews SAI360 does. Could a giant copy it? Yes, easily.
03
What protects it. Deep, hard-to-rip-out installed base: years of audit trails, training records, and policy data across 50+ countries that customers won't easily migrate.
What would change this call
ServiceNow or IBM OpenPages publicly named as displacing SAI360 in an existing enterprise account. would show ServiceNow/IBM winning against SAI360's installed base, not just new logos.
STG hires bankers or announces a sale process for SAI360 within 12-24 months. would confirm PE exit timeline over continued product investment.
SAI360 headcount trend after GRC Elevate 6.0 launch through Q4 2026. sustained decline would support margin-management over growth strategy.
Key numbers
  • ServiceNow has 61 Gartner reviews vs SAI360's 23 (2021)
  • Headcount fell from 493 to 438 before recovering to ~442 (2026-06)
  • Owned by PE firm STG since March 2023, no disclosed price (2023-03-28)
Named risks
  • PE owner STG may pursue exit or sale within 12-24 months, creating ownership uncertainty. Severity: high
  • ServiceNow and IBM OpenPages could bolt GRC onto broader platforms and win net-new logos. Severity: high
  • Regulatory horizon-scanning workflow already ceded to AI-native competitors, requiring acquisition (Plural Policy) rather than organic defense. Severity: medium
  • Conflicting revenue estimates ($36M to $250M) suggest limited financial transparency and possible stagnation. Severity: medium
  • CB Insights ranks SAI360 a Challenger, not Leader, among 14+ GRC vendors. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
ServiceNowlosing to2.6x more Gartner Peer Insights reviews than SAI360 in IT Risk Management, n.d.
IBM OpenPagescontestingPlatform incumbent listed as top comparator in Gartner alternatives pages, 2026
DiligentcontestingCited as direct GRC competitor across Crustdata and Gartner trackers, 2026-06-11
Archer (RSA)contestingCommonly compared against SAI360 GRC Platform in Gartner evaluations, n.d.
MitratechcontestingListed as direct GRC/IRM competitor, 2026-06-11
SecurityScorecardcontestingVendor-risk comparator to SAI360 third-party risk module, 2025-10-12
Questions people ask
Is SAI360 profitable and what is its actual revenue?
No verified figure exists. SAI360 is private and third-party estimates range wildly from about $36M (Prospeo) to $250M (LeadIQ), with ZoomInfo estimating roughly $96.8M as of 2026-07-06. No audited financials are public.
Who owns SAI360?
SAI360 has been owned by private equity firm Symphony Technology Group (STG) since it completed acquisition from BPEA EQT on 2023-03-28. Terms were undisclosed. Prior owner Baring Private Equity Asia took the SAI Global lineage private in 2016.
Could AI replace SAI360's compliance software?
Partially. SAI360 conceded its regulatory horizon-scanning workflow to AI-native competition, acquiring Plural Policy on 2025-12-01 rather than building it in-house. Its audit-trail system-of-record status resists pure LLM replacement, but growth-layer AI capability was bought, not built.
Who is SAI360's biggest competitor?
ServiceNow's GRC module and IBM OpenPages are the main platform-incumbent threats; CB Insights ranks SAI360 a 'Challenger,' not Leader, as of 2026-06-15. Gartner Peer Insights shows ServiceNow with 61 reviews versus SAI360's 23 in IT Risk Management head-to-head.
Is SAI360 growing or shrinking its headcount?
Roughly flat to slightly declining. Crustdata reports headcount fell from about 493 in February 2023 to 438 by October 2024, then recovered to 441 to 443 by June 2026, a pattern consistent with a mature PE-owned company rather than a scaleup.
Is SAI360 likely to be sold again soon?
It's a plausible near-term outcome. STG has owned SAI360 since March 2023 and continues bolt-on M&A (Plural Policy, December 2025), consistent with grooming for exit within roughly 12 to 24 months, though no banker mandate has been publicly confirmed as of 2026-07-22.
Timeline
  • 2026-05-21SAI360 launches GRC Elevate 6.0 with embedded AI, MCP support, new mid-market editions
  • 2025-12-01SAI360 acquires Plural Policy, an AI-driven regulatory intelligence startup
  • 2025-10-07SAI360 receives G2 Fall 2025 badges for user adoption and operational risk leadership
  • 2025-09SAI360 named Leader in 2025 Verdantix Green Quadrant for GRC software
  • 2023-03-28Symphony Technology Group completes acquisition of SAI360 from BPEA EQT
  • 2023-01-09STG announces agreement to acquire SAI360, terms undisclosed
  • 2021-09-08SAI Global sells Standards & Assurance business to Intertek for A$855M; remainder rebranded SAI360
  • 2016Baring Private Equity Asia (BPEA) acquires SAI Global, taking it private
  • 2003Standards Australia sells commercial business, forming ASX-listed SAI Global
Revision history
22 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources