SureCloud has launched Gracie AI, described in the PR Newswire release of 8 May 2026 as a persona-based virtual GRC team of autonomous agents spanning risk, compliance, audit and third-party domains. The company said agents can execute more than 200 distinct actions inside the SureCloud platform, moving beyond conversational co-pilots to governed execution against an organisation's own policies and expertise.
Personas cover roles such as Risk SME and Privacy SME; Skills codify how specific GRC activities should be performed for repeatable consistency. SureCloud cited its own research that 49% of UK enterprises struggle with five or more major regulations at once and that 57% say budget constrains the hiring needed to close gaps — figures attributed to the company, not independently verified here.
Chief executive Nick Rafferty said: "For two decades, GRC has been a discipline of skilled people doing manual work. The expertise was always there. The execution capacity never was. Gracie changes that equation by giving every person an agent counterpart that carries their workload, operates to their standard and frees them to do the work only a senior expert can do."
The release also noted recognition in three categories of the Gartner Hype Cycle for Cyber-Risk Management, 2026 and Gartner's Innovation Insight: Cyber GRC — company claims referencing those analyst publications. Named early Gracie customers and priced SKUs were not disclosed.