Optro launches domain-trained agents for audit, compliance, third-party Risk, and AI Governance. 14 Oct, 2026, 15:30 GMT New agents advance Optro's GRC Intelligence vision and the future of GRC, with every action logged and audit-ready. SAN DIEGO, Oct. 14, 2026 /PRNewswire/ - Optro, the leading AI-powered GRC Intelligence Platform, today announced the launch of an expanded set of autonomous agentic products to empower risk teams across the enterprise. Unveiled at CRX (formerly Audit & Beyond), Optro's annual user conference, the announcement marks the formal arrival of GRC Intelligence, the next evolution of GRC: a trusted system of record, agentic AI that acts on that data, and governance over all the AI operating within the enterprise. Optro's GRC Intelligence Platform is grounded in domain-trained precision, human-led control, and responsible governance. Rather than adapting generic AI models, Optro is the only GRC Intelligence Platform that delivers purpose-built GRC capabilities that operate strictly within team-defined guardrails and risk appetites. Every agent action, decision, model entry, and evidence trail is fully logged, cited, and audit-ready to ensure total enterprise confidence. "Every risk leader is asking two questions: what are your AI agents standing on, and how are you governing the AI running across your enterprise?" said Happy Wang, Chief Product and Technology Officer at Optro. "We built both into one platform with intention. Our agents work inside your live, permissioned context, taking on real-world workflows to deliver the exact business outcomes you need - so teams can move fast with a human in control. We don't just claim quality, we evidence it: from verifiable execution that yields high-value results, to thousands of tests before any release, and continuous monitoring once agents are live in your own environment, so your data stays with you. That is GRC Intelligence." Agentic capabilities announced today include: * Autonomous Testing: Optro's leading agentic testing engine now extends beyond SOX to operational audit testing across all control types, delivering full population coverage via Optro Analytics and giving auditors time back for judgment-based strategic work. Upcoming platform enhancements will soon introduce automated evidence collection to further streamline audit workflows. In its first three months using Autonomous Testing, Reddit's internal audit team automated 175 controls, more than 40 percent of its SOX scope, reducing testing time per control by 60 percent on average. The team has since expanded agentic testing to over 75 percent of its SOX controls and to other recurring testing programs. * Agentic Stakeholder Management: Reduces evidence follow-up by helping preparers clarify requests and address gaps before submission, so auditors spend less time chasing evidence and get to testing faster. * Agentic Risk Assessment Scoring: Analyzes selected Optro data and recommends starting scores with supporting evidence. Audit teams spend less time on manual analysis and gain a faster, more consistent view of risk for planning and prioritization. * Agentic Compliance: Turns compliance into a continuous program, where AI agents run framework scoping, evidence collection, and control evaluation across every framework, while teams make judgments and own every attestation. * Agentic TPRM: Delivers a prescriptive vendor assessment workflow where AI agents perform onboarding and due diligence tasks while teams configure policy and evaluate outcomes. * Agentic AI Governance: Automated intake pre-populates AI system records from existing documentation, and the evidence evaluator flags which controls are already satisfied. In addition, AI Discovery, previewing ahead of 2027 availability, surfaces shadow AI enterprise-wide. "Klaviyo has always been AI-first, so when we looked at our SOX program, we knew testing was the most manual, time-consuming place to start," said Carmen Lam, VP of Internal Audit and Compliance at Klaviyo. "With Optro's autonomous testing, we no longer bundle testing into a single point in time. We now test throughout the year, which means we catch issues earlier and work with control owners to fix them sooner. Accuracy is non-negotiable for us, and so is an audit trail that shows how every conclusion was reached. That lets my team spend less time on manual work and more on the judgment and foresight the business counts on us for." "Optro gives us the structured foundation and open integration we need to transform our audit operations and power our agentic workflows," said Matt Sewell, Sr. Director and Head of Internal Audit at FJ Management. "That structure lets us analyze workpapers automatically, run calibrated reviews, and log evidence directly within our live audit workflows. It has changed what our team can get through, while maintaining an auditable, human-in-the-loop standard." GRC was built for an era where the process of managing risk was predictable: document it, mitigate it, move on. Those days are over. The world now demands that GRC tell you what happens next. Optro's GRC Intelligence platform addresses this by building a system of action using autonomous AI agents to execute end-to-end workflows in real time. To see the new agentic capabilities in action, visit the Optroverse at CRX for a demo, or visit optro.ai. About Optro Optro (formerly AuditBoard) helps enterprises transform risk into opportunity through its AI-powered GRC Intelligence Platform. More than 50% of the Fortune 500 trust Optro to elevate audit, risk, and compliance in addressing a new era of risk. Optro is top-rated by customers on G2 and was named a Leader in the 2025 Gartner(R) Magic Quadrant(TM) for Governance, Risk and Compliance (GRC) Tools, Assurance Leaders. To learn more, visit optro.ai.

Optro, formerly AuditBoard, has launched a set of autonomous AI agents for audit, compliance, third-party risk and AI governance. The San Diego company unveiled them on October 14, 2026, at CRX, its annual user conference. The agents work within team-defined guardrails, and every action is logged and audit-ready. Products include Autonomous Testing, Agentic Compliance, Agentic TPRM and Agentic AI Governance. Reddit's internal audit team automated 175 controls, more than 40% of its SOX scope, in the first three months of using Autonomous Testing. Testing time per control fell 60% on average. An AI Discovery tool, which finds shadow AI across a company, is due in 2027.

GRC Intelligence takes the stage at CRX '26. ON THIS PAGE "GRC, as we know it, is no longer enough." That was the message Optro CEO Raul Villar Jr. brought to the stage at CRX '26, where leaders, practitioners, and innovators gathered to explore the evolving world of GRC. As AI transforms how organizations operate and risks become increasingly complex, the demands on GRC teams are changing, too. The executive keynote centered on the introduction of GRC Intelligence, Optro's system that helps organizations move beyond documenting risk to understanding it and taking action. Through a series of product announcements and demonstrations, the Optro leadership team showed how a trusted system of record, an intelligent system of action, and human oversight can work together to transform how GRC gets done. GRC Intelligence: The next evolution of GRC. For years, GRC technology has helped organizations collect information, document controls, manage workflows, and report on what happened. Those capabilities remain essential, but the demands on GRC teams have changed, as Raul described. Organizations are navigating increasingly complex risks, new regulations, and the rapid adoption of AI. Collecting information isn't enough. Teams must parse why the information is significant and determine how to take action. This shift led Optro to introduce GRC Intelligence. Rather than simply adding AI capabilities to existing workflows, GRC Intelligence connects two essential parts of the platform: * A trusted system of record: Connects the risks, controls, evidence, obligations, and vendors that give GRC teams a reliable foundation for their work. * An intelligent system of action: Uses AI agents that reason over an organization's specific policies, objectives, and GRC data to interpret information, execute tasks, and return results to the trusted system of record. Connecting these capabilities turns insight into action. For AI agents to deliver meaningful results, access to information isn't enough. They need accurate, structured data and a clear understanding of how the different parts of an organization's GRC program work together. And when agents act, every action must be traceable, reviewable, and accountable. GRC Intelligence Platform is built to help teams move beyond identifying risks and opportunities to act on them. From the CRX stage, GRC Intelligence became tangible. With the vision established, Optro's product leaders showed attendees how to put it into practice. Through a series of demonstrations, the team showed how agentic AI can support work across audit, risk, and compliance, from gathering evidence and testing controls to coordinating stakeholders and managing third-party risk. The common thread was straightforward: give AI the context and tools to take on more of the work, while giving professionals the visibility and control to oversee it. Agentic Compliance brings intelligence into the work. One capability introduced during the keynote was Agentic Compliance. Compliance teams spend considerable time manually gathering evidence, preparing for audits, and keeping information current across stakeholders and systems, leaving less time to identify and prevent issues. Agentic Compliance is designed to help shift that balance. By bringing AI agents into compliance workflows, Optro helps teams automate activities such as scoping, evidence gathering, and audit preparation, reducing the manual effort involved while maintaining human oversight. The significance goes beyond automating individual tasks. Within the GRC Intelligence Platform, agents can work within the context of an organization's controls, obligations, and existing evidence rather than treating each activity as a standalone request. That connection helps teams spend less time coordinating information and more time identifying gaps, evaluating emerging issues, and determining where action is needed. It's a practical expression of the larger idea introduced at CRX: intelligence becomes more useful when it can participate in the work itself, with professionals retaining the context and judgment to guide it. Agentic capabilities extend across GRC. Agentic Compliance is part of a broader set of capabilities showcased during the executive keynote. Autonomous Testing is an additional agentic capability that expands testing across all control types to deliver full population coverage, reduce manual effort, and free teams to focus on strategic, judgment-based work. Kieran Taylor demoed the new Autonomous Testing capability, with agents executing control testing procedures, examining supporting evidence, and identifying exceptions. One example involved tracing a variance in a financial reconciliation, with the agent documenting its findings in an exportable Excel workpaper. This illustrated how Autonomous Testing can take on detailed testing activities while preserving the evidence and documentation auditors need to review the results. The team also introduced additional capabilities across the platform: * Agentic Third-Party Risk Management: Streamlines vendor assessment workflows, including onboarding and due diligence tasks, helping teams assess risk more efficiently while maintaining control over policy and outcomes. * Agentic Stakeholder Management: Reduces evidence follow-up by helping preparers resolve gaps before submission, so teams can start testing sooner. * AURA Risk Assessment: Analyzes data and recommends evidence-backed risk scores, helping teams assess risk faster and prioritize work more consistently. Together, these announcements demonstrated how Optro brings intelligent assistance across GRC in one connected platform. Instead of siloed tools that solve isolated problems, these capabilities draw on shared information and integrate into the workflows teams already use. AI governance makes action accountable. The keynote also addressed a question that becomes increasingly important as organizations adopt AI: How do you govern the technology that's now doing more of the work? Guru Sethupathy brought that question into focus during the closing product presentation. As organizations deploy AI across their operations, they face two related responsibilities: governing the AI being introduced throughout the enterprise and ensuring that the AI agents working inside their GRC programs operate responsibly. Optro's expanded AI Governance capabilities, strengthened by the acquisition of FairNow, help organizations discover AI use, identify associated risks, and prioritize systems for human review. A unified inventory brings together AI introduced through vendors, employee use, and internally developed applications, giving organizations greater visibility into the technology operating across their businesses. That same approach to governance extends to the agents operating within the GRC Intelligence Platform, with actions logged, cited, and reviewable. As Guru emphasized, putting AI to work and governing its use are two sides of the same challenge. The more technology can do, the more human judgment matters. For all the technology introduced during the keynote, Optro's leadership returned to a distinctly human message. AI can gather information, execute testing procedures, identify exceptions, and coordinate work. But it doesn't eliminate the need for the expertise GRC professionals bring to their organizations. Professionals still determine risk appetite, establish guardrails, evaluate findings, and make decisions that require an understanding of business context and consequences. As technology takes on more operational work, teams have an opportunity to redirect their attention toward critical thinking, professional judgment, and advising the business. As Optro CMO April Crichlow reminded attendees, the growing presence of AI across organizations makes the role of GRC professionals more important, not less. AI may change how GRC work gets done, but the judgment behind the decisions remains firmly in human hands. CRX '26 offered a closer look at how GRC is evolving, from the introduction of GRC Intelligence to new agentic capabilities designed to help teams move from information to action. Across the executive keynote, one message remained clear: intelligent technology can take on more of the work, but trusted information and human judgment remain essential. See the GRC Intelligence vision unfold