Deutsche Bank has co-led a $10 million Series A funding round for Norwegian compliance automation provider Kosli, joining forces with Heavybit and other investors to support the company’s mission to modernize governance, risk, and compliance (GRC) in regulated industries.
Kosli tackles a long-standing problem in software development for financial services—the slow and costly bottleneck caused by outdated GRC workflows that delay production releases and increase operational risk. A 2024 McKinsey survey found that 41% of global financial institutions cite weaknesses in reporting and metrics as a major infrastructure issue.
Founded in 2019, Kosli helps clients automate software development lifecycle (SDLC) controls and audit trails, enabling them to release secure and compliant software at DevOps speed. Martin Reeves, a leader in Deutsche Bank’s technology division, emphasizes that Kosli addresses the unique challenges of software teams in highly regulated industries.
Alongside the funding, Kosli Enterprise launched with new features tailored for financial services, including large-scale user support, automated change management, and real-time audit evidence generation.
Mike Long, CEO of Kosli, highlights the inefficiencies in current compliance practices, where audit and control decisions rely on manual data entry, creating delays, errors, and hidden risks. He envisions Kosli transforming this process by embedding controls engineering that enables teams to deliver secure, compliant software at scale.