How one company is converting the world’s regulations into executable AI agents — and launching a law firm to capture the full value chain. $140M+ raised at ~$900M valuation on $2.3M disclosed revenue. 51 new buyer-side expert calls reframe the bull and bear — both get sharper.
May 2026
AI agents that autonomously execute compliance analyses — converting regulations into decision trees and producing verdicts with reasoning.
Norm AI
$140M+ raised · ~$900M valuation · $30T AUM client base
Track new and changing regulations. Alert compliance teams. Don’t execute the analysis.
Ascent, Regology, Compliance.ai
Workflow tracking, audit trails, dashboards. The project management tools of compliance — they don’t do the project.
ServiceNow GRC, MetricStream, SAP GRC
Broad legal AI for research, drafting, contract review. Not specialized in regulatory compliance.
Harvey, CoCounsel, Crosby
Key distinction: Legacy GRC platforms track compliance status. Norm executes compliance work. This is the difference between a project management tool and the person doing the project.
“Norm is not necessarily a tool. Norm is more of a copilot. It’s ChatGPT on steroids for compliance — it won’t have all of those automations that you need into the day-to-day workflow.”
“Compared to OpenAI, Norm is worth under a $100 million. This is a tiny, tiny company. It’s got to be something which really wins over peer institutions.”
“I have been investing and helping build companies in the banking, lending, payments, and fintech world for decades and the largest headwind for these companies now is the accretion of regulatory sludge — filling out forms, cross-checking information, ticking and tying.”
“We take regulations which are very complicated, very standards and principle-based, and we turn them into AI agents. An AI agent that can pursue an action — assessing whether something’s compliant or not — with a specific regulation.”
“There’s billions of hours a year spent by people filling out forms for the government. And then we’ve kind of adapted that idea at Norm to regulatory sludge as well.”
PhD Computational Decision Science, Vanderbilt University
Adjunct Professor, NYU Law (created first AI course at NYU Law)
Research Affiliate, Stanford Law (Center for Legal Informatics)
Co-authored LegalBench (LLM legal reasoning benchmark)
Prior company: Brooklyn Investment Group (AI investment advisor — saw compliance pain firsthand)
Engineering: AI engineers from Google, Palantir, Meta
Legal: Attorneys from Sullivan & Cromwell, Simpson Thatcher, Skadden, Sidley Austin
Strategy: Troy Paredes (former SEC Commissioner) — Head of Capital Markets Strategy
Legal Engineers: 35+ lawyers trained on Norm’s no-code platform (as of Nov 2025)[5]
“There’s a pretty cool company in San Francisco called Norm AI. They do regulatory compliance, regulatory agents. Recently they launched Norm Law — they’ve launched their own law firm regulated in the US. It will be entirely AI-enabled, based off the agents they’ve already developed to deliver the work their clients were doing before.”
“For premier big law law firms, that represents risk.”
“They’re basically trying to take business from the customers, which is interesting.”
“A legal engineer is someone who can develop the product, develop new regulations, but not need to code. So it’s a no-code tool.”
“We break down the regulation into all of its different requirements and nuances, and then we build that into a decision tree. The decision tree represents it legally but also enables from the technology perspective an AI to go very specific in each of its determinations.”
Moat assessment: The Legal Engineer bench is the hardest asset to replicate. Training 35+ elite lawyers as hybrid legal-AI builders takes years and millions. But the underlying no-code platform is buildable with sufficient investment.
Distribution at scale: Microsoft’s 1B+ M365 users represent a distribution channel Norm could never build alone. For compliance teams, embedded workflow beats standalone tools every time.
“As AI is more deployed, how do we make it more compliant as well?”
The terms of the Microsoft partnership are not disclosed. Is Microsoft reselling, co-selling, or just integrating? The answer determines whether this is a distribution channel or a branding exercise.
ACA Group: ~25-40% share of US/UK asset-mgr compliance.[24] BBVA frames Norm as displacing consultants, not workflow tools.
ACA Group, Big Four advisory
BBVA ranked Norm 4th of 5 in marketing-compliance RFP — chose Hadrius.[19]
Hadrius, Saifr, Sedric, GovernGPT
Compliance.ai / Archer is now the replacement vendor at Norm’s marquee account — BNY acquired Archer.[17]
Compliance.ai / Archer, Ascent, Regology
“I think it’s hard to stand alone for a long time in just one thing. We’re seeing point solutions get squeezed — the buyer wants a full-service partner, and Norm’s move into Norm Law is the right response to that pressure.”
Elite institution invests
↓
Procurement friction collapses
↓
Single-use-case foothold (eComms, filings)
↓
Citi: linear ramp 25% → 60% by 2028
BNY: degrades to 20-fund inherited base
↓
Outcome depends on use-case fit, not cap table
Altis read: the strategic-investor cohort delivers procurement access, not usage compounding. Where the use case is a structured rules engine (Citi), Norm compounds; where it’s multi-stakeholder workflow (BNY marketing-compliance), the buyer builds in-house. NDR at this cohort is the load-bearing unknown for the valuation.
“The eComms surveillance work is orders-of-magnitude faster than keyword search. False-positive rate dropped dramatically. Six months in production, we’ve replaced offshore contract reviewers.”
“We’ve had hallucination problems with their AI functions, API documentation gaps, support limited by their headcount. Maybe Archer should have acquired Norm Ai.”
“It’s a tiny, tiny company — under $100M to me. Niche product, much more tailored toward regulatory — not something we’re yet ready to use. It’s got to win over peer institutions first.”
Cohort caveat: 51 transcripts span Oct 2024 – Jan 2026, concentrated in financial-services compliance. ~half are longitudinal sampling of the same role at the same firm (BNY CIO ×8, Citi SVP ×13, Franklin Templeton ×3, CTC ×5). Cross-firm signal is ≤10 distinct voices — weight accordingly. No buyer-voice corroboration of Norm Law commercial traction or M365 channel economics in this corpus.
Norm AI blog, PR Newswire announcements, Bain Capital Ventures thesis, Craft Ventures thesis, Citi Ventures thesis. Financial data: Latka (revenue), PremierAlts (valuation), Crunchbase/PitchBook (funding).
(1) NDR at strategic-investor accounts; (2) win-rate vs. in-house build at tier-1 banks; (3) Norm Law commercial traction (zero independent corroboration); (4) M365 partnership channel economics. See slide 14.
1. Informational Purposes Only. This report is provided for informational purposes only and does not constitute investment, legal, tax, accounting, or other professional advice. Altis Ventures, Inc. (“Altis”) is not an investment advisor.
2. No Recommendation or Solicitation. Nothing in this report should be interpreted as a recommendation to buy, sell, or hold any security.
3. No Reliance. Recipients may not rely on this report as the basis for any investment decision.
4. No Guarantee of Accuracy. This report may include information from third party sources, expert interviews, and AI-assisted analysis. Altis does not independently verify all data.
5. AI-Assisted Analysis. Portions of this report may have been produced or synthesized through use of AI. All AI-assisted content is subject to human review.
6. Forward-Looking Statements. Views expressed are those of Altis as of the date indicated and are subject to change.
7. No Duty to Update. 8. No Redistribution. 9. No Fiduciary Relationship.
10. Conflicts and Interests. Altis may have relationships with entities referenced in this report.
11. Warranty Disclaimer. THE REPORT IS PROVIDED ON AN “AS IS” BASIS.
12. Limitation of Liability. Altis’s aggregate liability shall not exceed $100.