Hadrius: Initiation of Coverage

GAII Intelligence defines the Risk, Compliance & Surveillance market as software that applies AI to the supervisory obligations of investment firms, banks and trading venues: capturing and retaining communications and trading records, detecting misconduct and market abuse, reviewing regulated content, and evidencing those controls to regulators. Buyers are chief compliance officers, heads of surveillance and conduct risk, and the technology and records teams that support them.

Capabilities we treat as mandatory

• Complete, defensible capture: records of every in-scope channel or trading system, reconciled and retained to regulatory standards such as SEC 17a-4.
• Explainable detection: every alert or finding traceable to the policy, rule or signal that produced it, in a form a regulator can examine.
• Institutional data handling: a stated position on where client data goes, how long it is held, and whether it is used for model training.

Capabilities we treat as differentiating

• False-positive reduction: measurable cuts in alert volume without loss of true positives, with a disclosed method.
• Agentic triage: agents that disposition first-level alerts and assemble cases under human supervision.
• Holistic coverage: communications, trade and conduct data analysed together rather than in separate tools.
• AI-channel governance: capture and supervision of employees' use of AI assistants as a regulated channel.

Hadrius competes with Smarsh, Global Relay and Theta Lake in communications archiving, with StarCompliance and ComplySci in personal trading, with ACA Group and other consultancies in outsourced compliance, and with Norm Ai in AI-led marketing and policy review.

The following are the capabilities and characteristics that, in our assessment, most distinguish Hadrius within the Risk, Compliance & Surveillance market. Each is drawn from publicly documented product capability, published interviews with management, or independent review.

• Breadth for smaller firms: Communications, marketing, trading, branches and testing in one platform aimed at lean compliance teams.
• Shipping velocity: Six launches between January 2025 and September 2026, including AI Governance and a Claude archive.
• AI-channel governance: Capture and supervision of employee use of Claude and ChatGPT, chosen by Ritholtz Wealth Management for a firmwide rollout.
• Data handling: Zero-retention inference with OpenAI; client data not used to train shared models (company).
• Custodian integration: Nightly feeds from Schwab, Fidelity, Pershing, NFS, Raymond James and Altruist, plus BridgeFT.
• Distribution: Partnerships with compliance consultants and named clients including BBVA, Altruist, Allworth Financial and M1 Finance.

The following are factors that prospective clients should weigh, and areas where our public review did not find sufficient evidence to reach a settled view. Several are common across vendors at this stage of the market and are not specific to Hadrius. We encourage prospective clients to raise each of them directly with the company; we have done the same, and will update this note as answers arrive.

• Assurance: SOC 2 Type II is stated by the vendor but the report was not located; ISO 27001, SSO and audit logging were not documented.
• Evidence: False-positive and time-saving figures are company-reported, with no published methodology or evaluation.
• Model dependency: Generative features rely on OpenAI; alternative providers are not disclosed.
• Scale: Founded in 2023 with $27m raised; headcount is not disclosed.
• Scope: US SEC and FINRA rules only; no multi-jurisdiction coverage.
• Detection transparency: The scenario library and full channel list are not public.
• Pricing: No public pricing and no trial located.

Hadrius, Inc. was founded in New York in 2023 by Thomas Stewart (CEO), Allen Calderwood (CTO) and Som Mohapatra (COO), who had previously built Quantbase, a quantitative investing platform sold to Surmount AI in March 2025. It was part of Y Combinator and in 2026 hired Benjamin Huber, formerly head of product at ACA Group, and go-to-market leaders from StarCompliance, Orion and Smarsh.

Hadrius raised a seed round (announced at $2m in September 2023; $5m in total) and a $22m Series A led by CRV in July 2026, with Y Combinator, Pathlight Ventures and founders of Altruist, Jump and FINNY — $27m in all. Valuation, revenue and headcount are not disclosed.

Company-reported figures are shown as such and are not independently verified. Verification is carried into the vendor questionnaire.

Hadrius organises its platform around six modules for SEC- and FINRA-regulated firms. Figure 2 sets out our assessment of how it maps onto the compliance and surveillance workflow.

Communications and AI Governance

Multi-channel capture, WORM archive and AI surveillance, including Claude and ChatGPT activity.

Marketing review

AI review of marketing materials against the SEC Marketing Rule and FINRA rules.

Trade surveillance

Personal and client trade monitoring, pre-clearance and prediction-market activity.

Firm oversight and branches

Testing calendars, policies, risk assessments and branch inspections.

Scope of the product today

We did not locate a public API, a published scenario library or multi-jurisdiction coverage.

Hadrius uses AI for the first review of communications, marketing and trades rather than as a filter on rule alerts. Context IQ connects each item to the employee, supervision structure, history and firm policy; agentic workflows run testing and prioritise risk for human review.

Generative features use OpenAI through stateless, zero-retention inference. Accuracy figures are company-reported and no evaluation is published.

Hadrius captures email, messaging and enterprise AI chat — more than 30 channels by its count — into a WORM archive, and ingests trades nightly from major US custodians, OMS platforms and BridgeFT.

Detection combines AI review against SEC and FINRA rules with a no-code rule builder; the scenario library is not published.

Hadrius fits the chief compliance officer of a small or mid-sized adviser or broker: one system of record for surveillance, marketing review, testing and exam readiness.

Larger institutions will find integration documentation and assurance thinner than at established vendors.

Hadrius states SOC 2 Type II compliance on its security page and uses zero-retention inference. Figure 3 sets out what our public review located.

We would encourage buyers to request the SOC 2 report, ISO 27001 status, SSO and audit-logging documentation and model-provider terms.

The offsetting factor is data handling: a stated zero-retention, no-training design.

Hadrius does not publish pricing. It claims average savings above $35,000 a year per compliance team and positions itself against consultancies and point solutions.

Buyers should seek quantified references and module-level pricing.

Hadrius sits in the Emerging quadrant of the segment matrix, with investment utility (X 6.72) ahead of AI and enterprise evidence (Y 6.32).

GAII Risk, Compliance & Surveillance coverage, 20 October 2026, scored on the segment variant of Data & Content and Workflow Fit; not directly comparable with Research & Intelligence scores.

11.1 Where Hadrius is strongest relative to peers

• Against archive incumbents, on AI-first review and AI-channel governance.
• Against consultancies, on cost and automation.
• Against point solutions, on breadth for small firms.

11.2 Areas of narrower functional focus

Hadrius has built breadth and release pace ahead of assurance and evidence.

• Assurance: ISO 27001 and SSO not located.
• Evidence: company-reported metrics.
• Scope: US rules only.
• Scale: early-stage company.

Scores are on a 0–10 scale. Each dimension score is the mean of its sub-criteria, and the GAII Overall Score is the weighted mean of the six dimensions. The detailed sub-criteria scores that build each dimension are set out in Appendix A.

These are the areas where our public review did not find sufficient evidence to form a settled view. We have put them to the company and will update this note when they are answered. Prospective clients may find them a useful agenda for their own evaluation call.

• SOC 2 Type II report period and auditor.
• ISO 27001 status.
• SSO/SAML, SCIM and audit logging.
• Model providers beyond OpenAI and contractual no-training terms.
• Full channel list and third-party 17a-4 attestation.
• False-positive methodology.
• Scenario library contents.
• Headcount and support capacity.
• Revenue and growth.
• Public API plans.
• Pricing.
• Quantified client references.

This note is an assessment of a vendor against a defined framework, not a recommendation to buy or to decline. The following are the considerations we would put at the centre of an evaluation of Hadrius specifically.

If you run compliance or surveillance

• Pilot AI review on marketing and communications.
• Test AI Governance if rolling out Claude or ChatGPT.
• Check scenario coverage against your exam findings.

If you are responsible for technology or vendor risk

• Open with Figure 3; request the SOC 2 report and SSO detail.
• Review OpenAI terms and data flow.
• Confirm custodian feed coverage.

If you are assessing the category rather than the company

• AI assistants are becoming a regulated communications channel.
• AI-first review is reaching smaller advisers.
• Software is competing with outsourced compliance consultancies.

Each dimension score in Section 12 is the mean of the sub-criteria below. Data & Content and Investment Workflow Fit use the Risk, Compliance & Surveillance segment variant.