Andera said it launched Andera GRC, an AI-native system holding the risk and control matrix, narratives, risks, issues and evidence linked to testing agents, free for a limited time to new and existing control-testing customers, in a company blog dated 14 September 2026.
Context cited two years building agents that test 100% of a control environment across messy, large and complex data — SOX, operational audits, KYC, PCI, AML and cybersecurity at multiple Fortune 500s. The connected-risk model updates related fields everywhere from one place rather than drifting spreadsheets, tickets and systems of record. The agent loop pulls evidence from connected source systems without request lists; tests and retests; on failure drafts an issue, suggests compensating controls and updates dashboards; documents every conclusion against evidence with agent reasoning; and flags ambiguity for human decision. Natural-language Q&A over the control environment is grounded in testing actually performed.
Claimed outcomes for teams using Andera include about a 75% cut in testing time and about a 70% cut in testing cost while moving coverage toward 100% of the control population. The product is positioned against incumbent GRC that only records work — Andera GRC completes testing via agents. Outcome percentages are company statements; AI-360 has not independently verified them. Distinct from the live Series A funding keeper.