Stas Bojoukha

CEO & Founder Compyl

Last Reviewed: September 25, 2026

Executive Summary

Stas Bojoukha is the founder and chief executive of Compyl, a New York company that makes a governance, risk and compliance (GRC) platform for mid-market and lower-enterprise organisations. He started it in 2020 with Simon Shaddock. Both had been chief information security officers, and both had run security programmes on a patchwork of point tools. Compyl’s founding question, in its own words, was “Are we secure?”, and its product tries to answer it from one connected system: controls mapped across frameworks such as SOC 2, ISO 27001, HIPAA and PCI DSS, risk management, vendor risk, evidence collection and, more recently, agentic AI. In June 2025 Compyl raised a $12 million Series A led by Venture Guides, after two years in which it reported doubling its customer base each year.

Career Highlights

• Co-founded Compyl in 2020 with Simon Shaddock and leads it as CEO.
• Raised a $12 million Series A in 2025 led by Venture Guides, whose partner Anton Simunovic joined Compyl’s board.
• Compyl reported doubling its customer base in each of the two years before the round, with triple-digit year-over-year ARR growth.
• Before Compyl, according to his speaker biography, served as a CISO, head of information security and data protection officer in financial services, real estate and energy.

Professional Journey

Bojoukha came to software from the buyer’s side. His speaker biography says that before Compyl he worked as a chief information security officer, head of information security and data protection officer in financial services, real estate and energy, and claims more than 20 years in regulatory compliance, risk management and security for global enterprises. The same biography lists the CISSP, CISA, CISM, GSEC, CEH and ISO 27001 Lead Auditor certifications. None of those employers or credentials has been checked against a primary source for this profile.

He and Simon Shaddock, another former CISO, founded Compyl in 2020. Their complaint was about how GRC work was actually done. Security teams either stitched point solutions together or spent long periods configuring and coding heavyweight GRC suites, and in both cases they struggled to say with confidence how secure the organisation was. Compyl’s answer is a single platform. It maps one control library across many frameworks so that a control tested once can satisfy several of them. It adds policy, contract and asset management, risk quantification using the FAIR model, and vendor and third-party risk. Bojoukha has stressed that Compyl builds its integrations in-house rather than through third parties, so that customers keep full access to their own data, and that its workflows, fields and dashboards can be configured without code.

The company sells directly and through channel partners, mainly to software, financial services, healthcare and other regulated organisations. It announced a $12 million Series A in June 2025, led by Venture Guides. Contour Venture Partners, Armory Square Ventures, nvp capital, Alpine Meridian Ventures, Brooklyn Bridge Ventures and Zelkova Ventures also took part. At the time Compyl said it would put the money into go-to-market expansion, hiring and AI features, including a compliance copilot, and it planned to expand into Asia-Pacific. Bojoukha told AlleyWatch that the round came together largely through inbound interest after an introduction at a cybersecurity industry event. The platform now markets agentic AI features, including Compyl Copilot and AI-drafted security questionnaire answers.

Education

No education record was found in any first-party or editorial source that could be read.