OneClickComply raises £1m to fix what compliance audits only report

On 24 September, Mercia Ventures announced that OneClickComply, a Sunderland compliance software company, had raised £1m. The money came from the North East Accelerate Fund, which Mercia Ventures manages, and from the Venture Sunderland Fund and the Northstar EIS Growth Fund, both managed by Northstar Ventures. A deal listing on UK Tech News that carried the announcement on 23 September records it as a seed round led by Mercia Ventures. Mercia Ventures says the round takes the company’s total raised to more than £2.4m.

The product connects to a business’s Microsoft 365, Google Workspace and AWS accounts, checks their settings against standards such as Cyber Essentials, ISO 27001 and SOC 2, and can apply the missing security configuration with a single click. It also runs penetration testing and vulnerability management, writes policies and gathers evidence for auditors. The company says it automates up to 90% of the work of reaching those standards, and that once a customer is certified the platform detects and fixes problems as they appear.

Connor Greig, co-founder and chief executive, set out the commercial case in the announcement: “Every business now gets asked to prove its systems are secure, usually by a customer who’s about to sign. The answer shouldn’t be three months and a consultant.”

A certificate such as Cyber Essentials or ISO 27001 has become a line item in a sales cycle, and at a firm with no security team the work of earning and keeping it lands on staff or a consultant. Northstar Ventures describes the product as moving “beyond merely identifying compliance shortfalls” to applying the fixes itself, and OneClickComply sells that repair and the upkeep after it as the product. The £1m round is the third time Northstar Ventures has backed the company on that promise, and Mercia Ventures, absent from the earlier announcements, has now joined it.

From FAT32 to OneClickComply

The business trades as OneClickComply but is registered as FAT32 Ltd, a company incorporated in April 2023 with its registered office in North Shields, according to Companies House. Northstar Ventures’ October 2024 announcement named Greig, Conor Sizeland and David Warren as the founding team. In a company blog post from August 2025, Greig wrote that he and Sizeland founded OneClickComply, “formerly FAT32”, in January 2024, and the post quoted Sizeland as chief technology officer and co-founder.

Mercia’s announcement says Greig launched the company in 2024 after seeing the need to simplify cyber compliance in his previous role working with businesses within the Octopus Group. Sizeland stepped down as a director in October 2025, Companies House records show. Greig remains a director and holds more than half of the shares.

Northstar Ventures has backed the company since its first announced round. In October 2024 it led a £625,000 round in FAT32, which included £350,000 as the first investment from the Venture Sunderland Fund. In August 2025 the same fund put in £275,000 of follow-on money as part of a £580,000 round, which Greig said took the total raised past £1.2m. Tom O’Neill, investment manager at Northstar Ventures, said of the latest round: “The business has grown significantly since our initial investment and it is tapping into an increasingly complex compliance and cyber security market where the risks of a breach or non-compliance are continuously rising.”

Selling the fix as well as the finding

The company’s website in September 2026 listed three plans – Core, Advanced and Complete – that rise by the number of standards, integrations and device agents covered, with prices quoted by its sales team rather than published. Mercia says OneClickComply employs 12 people and serves “dozens of customers ranging from a leading fast food brand to solo traders”. The announcement names none of them.

The growth figures are the company’s own. It says it has doubled monthly recurring revenue in the past six months and aims for similar growth in the six months ahead. It has not published the revenue itself.

Greig described what separates the product from a gap report: “We automate 90% of the work, fix the issues we find instead of just reporting them, and keep everything in place afterwards, which is the part everyone forgets about.” Owen Conquest of Mercia Ventures put it in investor terms, citing the platform’s “ability to automatically detect and remediate data compliance issues without the need for specialist intervention”.

Without that specialist, a business pays either in staff time or in consultant fees to get certified, then pays again at renewal if its settings have drifted. Northstar Ventures’ own announcement goes further than Mercia’s, saying that with the platform “expensive consultants could become a thing of the past”. That is an investor’s claim about a company it has invested in, and the customer evidence in the funding announcements is a revenue trend and an unnamed fast food brand.

What the £1m pays for

Mercia says the money will pay for product development, sales, customer service and four new jobs. On a staff of 12, that is a third more people. O’Neill tied the investment to “the generation of high-quality jobs in Sunderland’s growing cyber security cluster”, a priority he said Northstar Ventures shares.

The round adds sales and service capacity behind a product that already has paying customers. With more than £2.4m raised and a revenue target set in public, OneClickComply now has to show that customers who bought a one-click fix stay for the upkeep, and that the unnamed fast food brand is joined by business accounts it is willing to name.