We built the platform we could not find.
Sentrix was founded in Montréal by a team that spent years running GRC programs at regulated financial institutions and scaling SaaS companies. We kept buying the same five tools, mapping the same controls to five different spreadsheets, and running the same evidence sprint every quarter. There had to be a better way.
The problem we set out to solve
The average mid-market enterprise runs five separate GRC tools. They do not talk to each other. Evidence is collected five times. Controls are mapped five times. And then the renewal invoices arrive—each one unchallenged because nobody has the time or the data to push back.
We quantified this for our first cohort of customers. The average GRC tool stack cost $640K per year. Forty percent of those features were duplicated across tools. Customers were paying for the same capability—policy management, evidence collection, control tracking—in three different applications simultaneously.
We also found that the largest US-based GRC platforms treated Canadian regulatory frameworks as an afterthought. Law 25 was not natively supported. CPCSC was missing. TGV required custom work. For the regulated Canadian enterprises and government organizations we were building for, this was not acceptable.
Sentrix was built to fix all of it: one platform for compliance automation, third-party risk, policy management, license governance, and integrations—with Canadian standards as first-class citizens from day one.
Where we are today
We are headquartered in Montréal, Québec, Canada. Our customers include regulated fintechs, healthtech scale-ups, Canadian financial institutions, provincial government suppliers, and SaaS companies selling into enterprise.
We are backed by a group of investors who understand both the GRC space and the Canadian market. We are profitable-path and building for the long term—not optimizing for growth-at-all-costs metrics that create the wrong incentives in a compliance-critical product.
Our principles
Evidence over claims
We do not ask customers to trust our compliance posture. We show it. Our SOC 2 report, sub-processor list, pen test summary, and control evidence are publicly available at sentrix.ca/trust.
Canadian-first, not Canadian-only
Law 25, CPCSC and TGV are native because they are not afterthoughts for us. We also support every major international framework because our customers operate globally. Canadian data residency is the default, not an add-on.
The platform should pay for itself
Every customer engagement starts with a license optimizer analysis. We show you exactly what your current GRC stack costs and what you can cut. Customers identify an average of $180K in recoverable spend in the first 90 days. Sentrix should save you more than it costs you before your first audit closes.
No professional services debt
GRC platforms that require $50K implementation engagements to go live have misaligned incentives. Sentrix is self-guided. Most customers are audit-ready within 30 days. Customer success is included—not billable.
Built by people who live and breathe GRC.
William Georges Khouri
CISSP, CISM and ITIL certified, William founded Sentrix to bring sovereign Canadian GRC automation to regulated organizations. He leads the company’s strategy, product vision, and market expansion with deep expertise in cybersecurity, compliance, and vendor risk management.
Fanny Le Jeune
Fanny is part of Sentrix’s leadership team and oversees finance, administration, human resources, legal matters, and selected marketing initiatives. A true operational pillar, her rigor and precision ensure the financial discipline and transparency that clients in regulated sectors expect from a compliance platform.
Jorge Seara
Jorge Seara supports Sentrix clients in adopting and using the platform. With several decades of experience in client support and satisfaction, he ensures that clients maximize the value delivered while building lasting relationships based on trust.
See what we built.
A 30-minute demo using your real infrastructure. No slides. No hypotheticals.