Complaion Raises €13.5 Million to Hire SME Auditors

Complaion closed a €13.5 million seed round on 28 September 2026, co-led by Eurazeo and Italian Founders Fund, to hire more certified lead auditors and grow a hybrid compliance service out of Milan. The Italian firm, founded in 2024 by Edoardo Tarricone, Marco Cortinovis and Alessandro Vaccarino, says it already serves more than 900 companies with a staff of more than 40.

The raise is being sold as software. The scarce input is still a person who can sign an audit file.

A Seed Round That Buys Auditors

Tarricone is chief executive, Cortinovis chief operating officer and Alessandro Vaccarino chief technology officer. Their pitch is that SMEs can get ISO badges in weeks if a platform takes the paperwork and a named lead auditor takes the rest. Enzo Ventures, which had already written a pre-seed cheque, came back in. Edgar Vicente of Enzo said he first met Tarricone “at a little coffee shop in front of the Duomo in Milan” a little more than a year before this round, then “doubled down.”

FinSMEs records the round as seed. Vento, the venture vehicle tied to Exor, joined a list of European funds and family offices. The company says the money will bring in more specialised staff, thicken customer support and keep building the workspace that, on its own figures, already automates 80% of the manual steps.

THE SEED SYNDICATE

• Co-leads: Eurazeo and Italian Founders Fund ran the round together.
• Funds in the book: Shapers, 2100 Ventures, Kfund, Sella Direct Ventures and Enzo Ventures took part.
• Family vehicles: Vento (Exor Ventures), Ithaca, Eden Ventures and Vesper joined alongside them.
• Use of proceeds: hiring, the proprietary workspace, support systems and a commercial push across Europe, with Spain first.

Nicolas Debock, general partner at Eurazeo, said the firm put money in because the market is large and structural, held up by more legal duties and by small firms that now have to prove they comply. Lorenzo Franzi, founding partner of Italian Founders Fund, said Italy is Europe’s first ISO market and the world’s second, and that Complaion is opening public tenders to thousands of SMEs that used to find the process opaque.

Italy Holds 166,000 ISO Certificates

That ranking is not a slogan. Accredia, Italy’s national accreditation body, reading the ISO Survey of management system certificates as of 31 December 2024, puts Italy second in the world with a 6% share and more than 166,000 valid certificates. UNI, the Italian standards body, counts 101,426 Italian ISO 9001 certificates in the same survey year, behind China and ahead of India.

ISO 9001 CERTIFICATES IN 2024

World ISO 9001 certificates in that survey totalled 1,474,118. Italy also sits in the top three for ISO 14001, ISO 45001, ISO 37001, ISO 20121 and ISO 27001, and UNI puts it first for anti-bribery standard ISO 37001 with 2,984 certificates. Accredia recorded a 20% rise in Italian ISO 14001 certificates, 3% in ISO/IEC 27001 and 46% in ISO 37001.

A country that already treats management-system badges as a ticket to contracts is a different sales territory from a market that has to be taught why ISO 9001 exists. Franzi’s point about public tenders sits on that pile of paper. Complaion’s home market is dense with firms that already know the alphabet of 9001 and 27001 and now need someone to keep the file alive.

The Binding Constraint Is Forty People

The company pairs a platform with dedicated lead auditors and tells buyers it can certify a firm in a few weeks. It also says it has cut certification times by up to five times and that every file it has taken through has succeeded. Those are its figures. What the headcount shows is a service business with a software layer, not a self-serve app that prints badges at night.

COMPLAION IN NUMBERS

• Clients: More than 900 companies, across manufacturing, healthcare, construction, logistics, professional services, agri-food, IT and software.
• Staff: More than 40 professionals, with the new money earmarked for more specialists.
• Audits: A track record of more than 1,000 audits.
• Reach: Clients in more than 10 countries, with Italy still the main market.

On the public site, the named bench is small. Sara Mennella, a customer-success lead auditor for ISO 27001, is listed with 90-plus audits. Gregorio Ciani, a lead auditor for ISO 9001, 27001 and 42001, is listed with 80-plus. Federico Campisi, on the same three standards, is listed with 40-plus. The platform can watch deadlines, store evidence and push checklists. It cannot sit in the closing meeting with a certification body.

That is the second-order fact inside a seed labelled as tech. The 80% of tasks the software claims to take still leaves the 20% that has to be done by someone whose name is on an auditor register. Hiring those people, not buying more cloud, is what keeps 900 accounts from waiting in a queue. The expensive, repetitive grind SMEs already pay consultants to do is the work being automated, which is why the product investors bought is a hybrid, not a bot.

NIS2 Already Covers Medium-Sized Firms

Complaion’s catalogue now stretches past quality and information security into ISO 42001 for AI management, ISO 14001, UNI/PdR 125 on gender equality, the NIS2 Directive and the AI Act. The legal clocks on those last two items do not move together, and the one that already bites is not the one in the pitch deck’s future tense.

THE CLOCK AROUND THE ROUND

1. 14 December 2022: Directive (EU) 2022/2555, the NIS2 cybersecurity law, is adopted.
2. 2024: Complaion is founded in Milan.
3. 27 July 2026: Regulation (EU) 2026/1744, the Digital Omnibus on AI, enters into force and pushes back high-risk AI Act duties.
4. 2 August 2026: AI Act transparency duties apply, including telling people when they are dealing with an AI system.
5. 28 September 2026: Complaion closes the €13.5 million seed.
6. 2 December 2027: High-risk duties for stand-alone Annex III AI systems apply under the amended timetable.
7. 2 August 2028: High-risk duties for AI inside Annex I regulated products apply.

NIS2 already reaches medium-sized enterprises in listed sectors, using the size test in Commission Recommendation 2003/361/EC. Complaion’s own site warns of penalties of up to €10 million or 2% of global turnover for firms in 18 essential and important sectors, and it treats NIS2 as a live workstream next to ISO 27001. High-risk AI Act rules, by contrast, now sit at 2 December 2027 and 2 August 2028. ISO 42001 remains a management-system standard the firm will sell. It is not, on its own, a substitute for AI Act conformity.

A seed round that names the AI Act as a growth line is therefore selling a product whose hardest legal deadline just moved out by more than a year. The near-term file is NIS2, surveillance audits on 9001 and 27001, and whatever ESG paper a buyer or a tender desk is asking for this quarter.

Spain Is the First Market Outside Italy

Italy stays the core. Spain is the first foreign market in a plan to cover more of Europe. Serving clients in more than 10 countries is not the same as building a local auditor bench in Madrid. Lead-auditor supply, language, and the habits of each country’s certification bodies do not travel because a workspace is in English.

In an increasingly digital sector, human expertise must remain central, especially in a complex market such as compliance. We will continue expanding our offerings to serve an ever-growing number of SMEs in Europe and make compliance easier, effortless and reliable.

Edoardo Tarricone, co-founder and CEO, Complaion

Tarricone also said the firm will expand its lead-auditor team and keep those auditors at the centre of every client interaction. That sentence is the budget. Debock’s “structural market” claim only holds if the Spanish (and then French, German, Dutch) buyer wants the same bundle of 9001, 27001 and NIS2, and if Complaion can recruit people who are allowed to do the work in those jurisdictions. Software replicates. Accredited humans do not.

The planned add-ons, Health and Safety, Privacy and GDPR, subsidised financing and DPO-as-a-service, point the same way. Each one is another specialist hire. Each one is also another reason a 40-person firm cannot treat the next 900 logos as a pure net-retention story.

Certification Is the Ticket to Public Tenders

Complaion does not argue that SMEs want a prettier dashboard. It argues that they want to bid. The public site’s growth line is blunt: win tenders, close contracts, go after European funding. Francesco Ciciriello of Renewall, a client quoted on that site, described the badge as proof a fee is tied to work a third party has checked.

Holding ISO 9001 and ISO 45001 certifications means being able to tell the client, with concrete proof in hand, that the fee they pay reflects work that is organized, traceable, and managed according to internationally recognized standards verified by a third party. It is not a matter of opinion: it is certified.

Francesco Ciciriello, Renewall, on Complaion’s site

STANDARDS ON THE SHELF

• Quality and safety: ISO 9001, with ISO 45001 already showing up in client files such as Renewall’s.
• Information and AI: ISO 27001, ISO 42001, plus NIS2 and AI Act support.
• ESG and equality: ISO 14001 and UNI/PdR 125.
• Next on the list: health and safety, GDPR, subsidised finance and DPO-as-a-service.

The certification body, not Complaion, still issues the piece of paper. ISO itself does not certify anyone. The firm’s method, as it describes it, is an account-executive call, then lead auditors on gap analysis, documents and the internal audit, then an external body for the final stages. That is a consultancy with a workspace, priced for firms that cannot staff a compliance department, and sold into a country where 101,426 ISO 9001 certificates already hang on walls.

Eurazeo and Italian Founders Fund are paying to clone that pattern beyond the Alps. The test is whether Spanish SMEs will buy a Milan auditor-plus-software bundle fast enough to justify a seed of this size before the AI Act’s hard dates, now parked in 2027 and 2028, come back onto the calendar.

Frequently Asked Questions

What size of company is Complaion built for?

The firm says it is built for companies with up to 500 employees and no in-house compliance department, the group that needs ISO files for buyers and tenders but cannot spare a full-time quality manager. That cap sits above the EU’s usual SME headcount test and matches the “small mid-cap” band now used in parts of the AI Act relief package.

Does Complaion issue the ISO certificate itself?

No. Complaion prepares the management system, runs internal audits and walks the client to the closing meeting; an independent certification body issues the certificate, and ISO as an organisation does not certify companies. The firm says it works with selected certification bodies and built its process with those bodies so non-conformities are not a surprise at stage two.

Which standards sit beyond ISO 9001 and ISO 27001?

The live catalogue includes ISO 42001 for AI management, ISO 14001 for environmental management and UNI/PdR 125 for gender equality, plus support on NIS2 and the AI Act. Health and safety, Privacy and GDPR, subsidised financing and DPO-as-a-service are listed as expansion lines rather than as already-complete products.

How does the process run from the first call to the audit?

An account executive takes the first call on context and which badge is needed. Certified lead auditors then handle analysis, documentation and the internal audit on the platform, which the company says automates 80% of the manual work. Customer-success staff stay on for surveillance, renewals and new rules after the external certification body has signed the certificate.