Acquisition Opportunity CastleHill has been acquired by Concentrix as of September 2026, signaling potential integration of GRC capabilities into a larger technology and services platform and potential cross-sell opportunities to Concentrix clients.

GRC Market Position As a specialized GRC and TPRM provider with partnerships to Archer, ProcessUnity, OneTrust, and MetricStream, CastleHill complements adjacent risk and compliance offerings, suggesting a path for expanding through partner-led deals and joint offerings.

Growth Potential Revenue range indicates a mid-market to small-enterprise footprint with 51-200 employees and a scalable services model, presenting up-sell opportunities to larger organizations and upsell of managed services, advisory, and GRCaaS.

Service Expansion Core strengths in third-party risk management, platform implementations, and managed services create cross-sell avenues into clients needing end-to-end GRC programs, risk assessments, and remediation across regulated industries.

Technology Alignment Active tech stack including OneTrust, Jira, WordPress, and Microsoft 365 aligns with common enterprise workflows; opportunities exist to broaden integration reach, data reporting capabilities, and automation with existing client ecosystems.