Naaia raises €6M to turn AI Act compliance into a competitive advantage
The essentials. Paris-based startup Naaia, founded in 2022 by three specialized lawyers and a digital transformation expert, closes a €6M Series A led by Ventech. The platform automates AI compliance for large enterprises — AI Act, ISO 42001, Cyber Resilience Act — through a centralized AIMS (AI Management System). Total raised: €9M since inception. Funds will go to the sales, product, and technical teams, and to integrating new regulatory frameworks.
Key takeaways
- €6M Series A led by Ventech, bringing total funding to €9M since 2022 (Maddyness, retrieved 2026-07-10)
- Claimed clients: Bouygues, Colas, Île-de-France Mobilités, Bouygues Construction, EQUANS, IDEMIA — a CAC 40 / large mid-cap positioning from seed stage onward (naaia.ai, retrieved 2026-07-10)
- The platform covers AI Act, ISO 42001, and Cyber Resilience Act simultaneously on a single AIMS
- AI Act deadline for high-risk systems: end of 2027-2028 — the addressable market accelerates as a direct result (European Commission)
- Lead investor Jean Bourcereau (Ventech): "Compliance and auditability are critical prerequisites for massive AI agent deployment in enterprise" (ventechvc.com, retrieved 2026-07-10)
What Naaia does
Naaia positions itself as the first European AIMS built on the ISO/IEC 42001 standard. In practice: an organization deploys dozens, sometimes hundreds, of AI systems in production. Scattered inventories, unclear responsibilities, nonexistent documentation — that's the daily reality for most CIOs and DPOs in 2026.
The Naaia platform centralizes this inventory, assesses the risk of each system, assigns responsibilities to the relevant teams, and automates compliance controls on an ongoing basis. The "text to action" approach turns a regulatory requirement directly into an executable task within the tool — without going through consultants or law firms as intermediaries.
Multi-framework coverage is a genuine differentiator. Where a sector-specific tool covers a single standard, Naaia maps the European AI Act, ISO 42001, the US NIST AI RMF, and the Cyber Resilience Act simultaneously. For a multinational exposed to regulations on both sides of the Atlantic, that's a strong consolidation argument.
Target market: companies with more than 500 employees in finance, insurance, healthcare, public transport, and defense — all sectors classified as "high risk" under the AI Act. The logos displayed on the site (Bouygues, Colas, Île-de-France Mobilités, IDEMIA) confirm an enterprise-level positioning from its commercial launch in 2023.
The most visible direct competitor is Credo AI (US, $50M raised), with a similar focus on AI governance. In the European segment, Naaia claims a leading position, reinforced by the founders' legal background — a non-replicable asset for winning the trust of European CISOs and DPOs.
Funding round details
- Amount: €6M
- Date: July 2026
- Round: Series A
- Lead investor: Ventech (Jean Bourcereau, President & Managing Partner)
- Co-investors: Business angels (previous rounds)
- Total raised since 2022: €9M
- Headquarters: Paris, France
- Founders: Nathalie Beslay (CEO, lawyer specializing in data and AI), Benjamin May (lawyer), Olivia Rime (lawyer), Côme Sauzay (digital transformation expert)
- Use of funds: Strengthening the sales, product and engineering teams; developing AI agents integrated into the platform; integrating new regulatory frameworks (Cyber Resilience Act)
Why this round matters
Three strategic takeaways deserve attention.
First, the regulatory timeline is an objective demand driver. The AI Act sets binding obligations for high-risk AI systems, with enforcement dates set between late 2027 and 2028. This is not a distant deadline: audit, certification and compliance cycles at large enterprises take 12 to 24 months. CIOs who haven't started the process today will be structurally behind by 2027. Naaia is riding a narrow and predictable window — a market profile that late-stage funds appreciate.
Second, the choice of Ventech as lead is a positioning signal. Ventech is a Franco-European fund that has been active in enterprise B2B SaaS for 30 years, with Series A tickets in the 5-15 M€ range. Jean Bourcereau's statement — "compliance and auditability as critical prerequisites for massive AI agent deployment" — indicates that Ventech reads Naaia not as a regulatory niche but as an infrastructure layer required for large-scale deployment of AI agents in the enterprise. This is a significant semantic repositioning: compliance becomes a prerequisite for operability, not a peripheral constraint.
[UNIQUE INSIGHT] Naaia's founder profile — three lawyers specialised in data law, complemented by a digital expert — creates a credibility asymmetry that tech-first competitors will struggle to replicate. In a market where the trust of the CISO and the DPO is the real buying criterion, the founders' legal legitimacy is a go-to-market asset that money alone cannot quickly reproduce. It also explains the speed of enterprise adoption from 2023 onwards: companies like Bouygues or IDEMIA don't integrate AI compliance tools without thorough due diligence on the vendor's legal robustness.
What this funding round reveals about the AI governance market in 2026
Naaia's raise fits into a clear sector-wide dynamic. Three trends stand out.
Regulatory compliance is becoming an infrastructure segment, not a consulting one
For a long time, AI compliance was the domain of law firms and risk consultancies. Naaia's "text to action" model — turning a regulatory requirement into an automated workflow within the platform — represents structural disintermediation. It's the same shift we saw in financial compliance with tools like ComplyAdvantage or Clausematch: what used to cost €200k in consulting becomes a SaaS subscription. For large enterprises, the savings are immediate. For traditional firms, the threat is real.
Investors read the AI Act as a B2B market catalyst, not a constraint
Several European funds reported in 2025-2026 an explicit investment thesis around "AI governance" and "AI observability" tools. The Naaia funding round confirms this trend: Ventech is not backing a niche legal-tech startup, but an infrastructure layer for enterprise AI deployment. Other adjacent players benefit from the same tailwind — model auditing tools, bias detection, traceability of algorithmic decisions. The global AI governance market (including risk, compliance, and observability) is projected to reach several billion euros by 2028, according to multiple market analyses from specialized firms.
Europe is producing its own regulatory champions — and that's a geopolitical competitive advantage
US players (Credo AI, IBM OpenScale, Microsoft Purview AI) are entering the European market with products designed for the US regulatory context. The AI Act is a European specificity: its risk categories, documentation obligations, and post-market surveillance requirements don't map onto American frameworks. A startup built by European legal experts, for the AI Act, since 2022, has a head start on the fine-grained understanding of the regulatory text that the big American vendors will struggle to close quickly. It's a 3-to-5-year window — if Naaia executes well, it can set the de facto standard for the European AIMS before the hyperscalers take over.
FAQ
Who are Naaia's founders?
Naaia was founded in 2022 by Nathalie Beslay (CEO, a lawyer specializing in personal data and AI), Benjamin May and Olivia Rime (law firm partners), as well as Côme Sauzay, a digital transformation expert. The legal trio gives the platform a level of regulatory credibility that is rare in the AI legaltech sector. (Source: Maddyness, retrieved 2026-07-10)
How much has Naaia raised in total?
Naaia has raised €9M since its founding in 2022: an initial seed round and a €6M Series A closed in July 2026, led by Ventech. (Source: Maddyness, retrieved 2026-07-10)
Who are Naaia's main clients?
Naaia's website lists several major French accounts: Bouygues, Colas, Île-de-France Mobilités, Bouygues Construction, EQUANS and IDEMIA. The platform targets mid-sized companies and CAC 40 groups operating in sectors classified as "high risk" under the AI Act (finance, transport, healthcare, defense). (Source: naaia.ai, retrieved 2026-07-10)
What is the Naaia platform's regulatory coverage?
The platform simultaneously covers the European AI Act, the ISO/IEC 42001 standard, the US NIST AI Risk Management Framework and the Cyber Resilience Act. Integrating the Cyber Resilience Act is one of the development priorities funded by this Series A. (Source: naaia.ai, retrieved 2026-07-10)
What will the €6M raised by Naaia be used for?
The funds will primarily go toward strengthening the sales, product and technical teams, developing AI agents built into the platform, and integrating new regulatory standards. The context is clear: AI Act obligations for high-risk systems apply between late 2027 and 2028, creating adoption pressure over the next 18 months. (Source: Maddyness, retrieved 2026-07-10)
Sources
- Maddyness, Naaia raises €6 million to help businesses comply with the AI Act, retrieved 2026-07-10, https://www.maddyness.com/2026/07/08/naaia-leve-6-millions-deuros-pour-aider-les-entreprises-a-se-conformer-a-lia-act/
- Naaia, official website, retrieved 2026-07-10, https://naaia.ai/en/
- Ventech, Naaia raises €6 million to consolidate its position as Europe's leading trusted AI platform, retrieved 2026-07-10, https://www.ventechvc.com/stories/naaia-leve-6-millions-deuros-pour-asseoir-sa-position-de-plateforme-europeenne-leader-de-lia-de-confiance
