Collibra acquires trail ML to automate EU AI Act compliance

Collibra has acquired Munich-based startup trail ML to strengthen its ability to automate compliance with the EU AI Act and other AI governance frameworks. The deal reflects growing demand for real-time regulatory technology as enforcement powers take effect.

Collibra acquires trail ML to automate AI governance

Collibra, a data governance company, has acquired trail ML, a Munich-based startup focused on automating compliance with the EU AI Act and other AI governance frameworks. According to The Next Web, the deal aims to enhance Collibra’s ability to enforce AI governance through automated rule-checking and runtime policy enforcement.

trail ML’s technology is designed to determine which AI rules apply to a system and verify whether its controls are functioning as intended. Its agents assess compliance with frameworks such as the EU AI Act, ISO 42001, and the NIST risk framework, rerunning evaluations whenever underlying evidence changes—rather than relying on annual audits.

The startup was founded in 2023 by Anna Spitznagel, Nikolaus Pinger, and Sven Hoelzel. While the acquisition price and trail ML’s customer base were not disclosed, the deal highlights growing demand for tools that streamline regulatory compliance in real time.

EU AI Act drives demand for compliance tech

The EU AI Act’s enforcement powers came into effect on 2 August, creating a market for automated compliance solutions. According to The Next Web, the regulation empowers the European Commission to impose fines of up to EUR 15 million or 3% of global turnover, whichever is larger, for violations.

Non-EU providers must also appoint a representative within the bloc to ensure compliance. The Act’s frontier model unit, staffed by 36 employees, reflects the scale of oversight required. This regulatory environment has accelerated demand for tools like trail ML’s, which enable continuous monitoring and policy enforcement.

Automated compliance tools are gaining traction because they address a critical gap: while regulatory obligations are extensive, manual checking processes are often insufficient or infrequent.

Collibra’s expansion into AI governance

Collibra, originally based in Brussels, relocated its headquarters to New York in 2015. The company serves over 700 customers, including 78 Fortune 500 companies, positioning it as a key player in enterprise data governance.

The acquisition of trail ML allows Collibra to extend its capabilities into AI-specific regulatory compliance, addressing a need that spans industries like finance, healthcare, and technology. Runtime policy enforcement—where non-compliant actions are blocked before execution—is a standout feature of trail ML’s technology.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

This acquisition signals two trends founders should watch closely:

First, regulatory technology is no longer optional for AI startups. The EU AI Act’s enforcement deadline has turned compliance into a product feature, not just a legal checkbox. Founders building AI agents or enterprise AI tools must bake governance into their architecture from day one—or risk losing enterprise customers who can’t afford fines or reputational damage.

Second, runtime policy enforcement is becoming table stakes. trail ML’s ability to block non-compliant actions before they execute gives Collibra a competitive edge in industries like finance, healthcare, and defense, where real-time oversight is non-negotiable. For founders, this means governance tools need to move beyond annual audits to continuous, automated monitoring.

The undisclosed price also suggests that early-stage startups with working compliance tech are attractive targets, even if they lack scale. If your startup is solving a regulatory pain point—especially one tied to an imminent deadline—this deal could embolden acquirers to move sooner rather than later.

Key takeaways

• Collibra has acquired trail ML, a Munich-based startup specializing in automating AI governance and compliance.
• The EU AI Act’s enforcement powers, effective since 2 August, are driving demand for automated compliance tools.
• trail ML’s technology supports compliance with the EU AI Act, ISO 42001, and NIST risk frameworks, enabling real-time policy enforcement.
• Collibra serves over 700 customers, including 78 Fortune 500 companies, and is expanding its regulatory technology capabilities.
• The acquisition price and trail ML’s customer base were not disclosed, but the deal reflects growing M&A interest in AI compliance startups.

FAQ

Why did Collibra acquire trail ML?

Collibra acquired trail ML to enhance its AI governance capabilities, particularly to automate compliance with the EU AI Act and other regulatory frameworks. trail ML’s technology enables real-time policy enforcement, which aligns with Collibra’s focus on enterprise data governance.

What does trail ML’s technology do?

trail ML’s technology automates compliance checks for AI systems by determining applicable rules and verifying whether controls are functioning. It supports frameworks like the EU AI Act, ISO 42001, and NIST risk frameworks, rerunning assessments whenever underlying evidence changes.

How does the EU AI Act impact AI startups?

The EU AI Act imposes strict regulatory requirements, including fines of up to EUR 15 million or 3% of global turnover for violations. Non-EU providers must appoint a representative within the bloc. This has increased demand for automated compliance tools to ensure adherence to regulations.

What is runtime policy enforcement?

Runtime policy enforcement is a feature that blocks non-compliant actions before they are executed, ensuring AI systems adhere to regulatory policies in real time. This capability is critical for industries with strict compliance requirements.

Related on Lazyfounder

• OpenAI
• Anthropic
• Hugging Face
• More ai news
• AI whistleblower warns NYC lawmakers of existential risks as tech giants clash with Pentagon
• OpenAI tests visual ads in ChatGPT’s image generation, starting in Europe