Concentrix Strengthens Enterprise Risk and Compliance Capabilities with Acquisition of CastleHill

Concentrix acquires CastleHill to broaden enterprise risk, compliance and AI governance capabilities, especially for regulated industries and financial services clients.

Rhea-AI Summary

Concentrix (CNXC) has acquired CastleHill Managed Risk Solutions, a provider of Governance, Risk and Compliance, Third-Party Risk Management, and AI governance solutions.

The deal expands Concentrix’ ability to design, govern, and operate enterprise-wide risk and compliance programs through a single partner, adding CastleHill’s GRC-as-a-Service model that integrates people, process, and technology for real-world operations. CastleHill broadens Concentrix’ existing Financial Crime, Cybersecurity, regulatory compliance and other risk operations capabilities, and brings a portfolio of Banking, Financial Services, Manufacturing and other regulated clients.

The acquisition also adds strategic partnerships with technology providers such as Archer, ProcessUnity, and OneTrust, and deepens Concentrix’ focus on Banking and Financial Services and on managing risks at the intersection of regulation, operational resilience, cybersecurity and AI. Transaction terms were not disclosed.

Positive

• Acquisition of CastleHill adds GRC, TPRM and AI governance capabilities to Concentrix’ risk portfolio
• GRC-as-a-Service model enhances Concentrix’ ability to operate end-to-end risk and compliance programs
• New regulated-industry clients from banking, financial services and manufacturing expand Concentrix’ customer base
• Partnerships with Archer, ProcessUnity and OneTrust strengthen Concentrix’ risk and compliance technology ecosystem
• Deeper investment in Banking and Financial Services increases domain expertise and client relationships in a key vertical

Negative

• None.

Market Context

-2.1% was CNXC’s pre-publication 24-hour move, while transaction terms were undisclosed; the availab...

Analysis

-2.1% was CNXC’s pre-publication 24-hour move, while transaction terms were undisclosed; the available market data therefore reflects positioning before the CastleHill acquisition, not a reaction to it.

Key Terms

grc, tprm, ai governance, grc-as-a-service

4 terms

grc regulatory

"Governance, Risk and Compliance (GRC), Third-Party Risk Management (TPRM)"

GRC stands for Governance, Risk, and Compliance, a coordinated approach companies use to set rules, spot and manage threats, and follow laws and industry standards. Think of it as a company's operating manual and early-warning system—like household rules, smoke detectors, and a neighborhood code—that helps protect the business from legal fines, operational surprises, and reputational harm, which in turn reduces investor uncertainty and potential losses.

tprm regulatory

"Third-Party Risk Management (TPRM), and AI governance solutions"

TPRM stands for third-party risk management, the set of policies and processes a company uses to identify, assess, monitor and control risks that come from outside vendors, contractors, suppliers or partners. It matters to investors because weaknesses in a company’s TPRM can lead to service failures, regulatory fines, data breaches or supply disruptions—similar to how a weak bridge can interrupt traffic—so the strength of TPRM affects operational reliability and legal or financial exposure.

ai governance technical

"Third-Party Risk Management (TPRM), and AI governance solutions"

AI governance is the set of rules, oversight and practices a company uses to design, test, deploy and monitor artificial intelligence tools so they behave reliably, safely and fairly. Think of it as a vehicle’s maintenance schedule, road rules and driver checks for software: it reduces the chance of costly errors, legal penalties or reputation damage and helps investors judge whether a business can scale AI responsibly and protect value.

grc-as-a-service technical

"CastleHill’s differentiated GRC-as-a-Service model brings together people, process"

GRC-as-a-service is a third-party, often cloud-based, delivery of a company’s governance, risk management and compliance functions through software, managed services or both. It bundles tools and expertise—like monitoring controls, reporting on regulatory obligations, and assessing risks—so a business can outsource parts of its compliance and risk work; investors care because it affects how reliably a company identifies, tracks and fixes regulatory or operational risks and how much it relies on outside providers.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Expanding one of Concentrix' fastest-growing business lines, as demand accelerates for Financial Crime, Cybersecurity, Governance and Risk Operations expertise

NEWARK, Calif., Sept. 08, 2026 (GLOBE NEWSWIRE) -- Concentrix Corporation (NASDAQ: CNXC), a global technology and services leader, today announced its acquisition of CastleHill Managed Risk Solutions, a leading provider of Governance, Risk and Compliance (GRC), Third-Party Risk Management (TPRM), and AI governance solutions. The acquisition expands Concentrix’ ability to help organizations design, govern, and operate risk and compliance programs across the enterprise from a single partner.

CastleHill’s differentiated GRC-as-a-Service model brings together people, process, and technology to make governance and risk programs work in the messiness of real-world operations. Concentrix already helps organizations manage Financial Crime Operations, Cybersecurity Solutions, regulatory compliance, and other complex risk operations. CastleHill deepens and expands these capabilities.

Organizations are facing growing pressure from regulatory, cyber, third-party, data and compliance risks, with AI adding a new layer of complexity as it scales across the enterprise. CastleHill helps clients identify, govern, and manage these risks while building more resilient operations. The company brings a diverse portfolio of leading Banking, Financial Services, Manufacturing, and other regulated clients that complement Concentrix’ existing relationships. These capabilities are further strengthened by deep operational expertise and strategic partnerships with leading technology providers, including Archer, ProcessUnity, and OneTrust.

“Our clients recognize that AI-related risk across their enterprises is accelerating, and they need a partner with the deep domain expertise to design, implement, and operate these programs at scale,” said Chris Caldwell, President and CEO of Concentrix. “That’s exactly where we’re investing. Risk and Compliance is one of our fastest-growing specialized business lines, and CastleHill gives us even greater depth and scale to help clients navigate this rapidly evolving risk landscape.”

"Organizations need practical ways to manage risk while continuing to innovate,” said Tim Carbery and Michael Duggan, Co-Founders of CastleHill. "For years, we've helped clients navigate regulatory complexity, build and operationalize sustainable risk and compliance programs, and maximize the value of their GRC investments. Joining Concentrix combines that expertise with global scale, expanded capabilities, and operational excellence, helping our clients unlock even greater strategic value. We are excited about the opportunities ahead for our clients, our incredible team, and the business."

The acquisition deepens Concentrix' investment in Banking and Financial Services, bringing additional domain expertise, client relationships and expanding its ability to help clients manage the intersection of regulation, operational resilience, cybersecurity, AI, and risk. Together, Concentrix and CastleHill will help organizations simplify complexity and build more resilient, trusted businesses for this new reality. 

Terms of the transaction were not disclosed.

For more information, please visit https://www.concentrix.com/services-solutions/risk-compliance/

About Concentrix: Powering a World That Works
Concentrix (NASDAQ: CNXC), is the Fortune 500® technology and services company, helping the world's best brands create intelligent operations that perform in the real world. We design, build, and run integrated human and AI solutions, harnessing the insight from billions of real-world interactions to help 2000+ of the world’s most complex organizations solve their toughest business challenges. Backed by 20+ years of operational experience and battle tested AI, we’re the intelligent transformation partner that helps clients across every major industry move from ambition to measurable, scalable performance. Virtually everywhere. To learn more, visit concentrix.com.

Media Contact:
Marketing & Communications
Concentrix Corporation
media@concentrix.com

From Fortune. ©2026 Fortune Media (USA) Corporation. All rights reserved. Used under license. Fortune and Fortune 500 are registered trademarks of Fortune Media (USA) Corporation and are used under license. Fortune and Fortune Media (USA) Corporation are not affiliated with, and do not endorse products or services of, Concentrix.

Safe Harbor Statement
This news release includes forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. Forward-looking statements include, but are not limited to, statements regarding the company’s capabilities and positioning to deliver business outcomes and solve challenges for its clients, and statements that include words such as believe, expect, may, will, provide, could and should and other similar expressions. These forward-looking statements are inherently uncertain and involve substantial risks and uncertainties that could cause actual results to differ materially from those expressed or implied by such statements. Risks and uncertainties include, among other things, risks related to the company’s ability to successfully execute its strategy, competitive conditions in the company’s industry, and other factors contained in the Company’s Annual Report on Form 10-K for the fiscal year ended November 30, 2025 filed with the Securities and Exchange Commission and subsequent SEC filings. We do not undertake a duty to update forward-looking statements, which speak only as of the date on which they are made.

Copyright 2026 Concentrix Corporation and its subsidiaries. All rights reserved. Concentrix, the Concentrix logo, and all other Concentrix company, product and services names and slogans are trademarks or registered trademarks of Concentrix Corporation and its subsidiaries.

FAQ

What specific capabilities does CastleHill bring to Concentrix?

CastleHill provides Governance, Risk and Compliance (GRC), Third-Party Risk Management (TPRM), and AI governance solutions. Its GRC-as-a-Service model combines people, process, and technology to help clients identify, govern, and manage regulatory, cyber, third-party, data, and compliance risks while building more resilient operations.

How does this acquisition affect Concentrix’ position in financial services and other regulated industries?

The acquisition deepens Concentrix’ investment in Banking and Financial Services by adding additional domain expertise and client relationships from CastleHill’s portfolio. It also strengthens support for other regulated sectors such as Manufacturing, enhancing Concentrix’ ability to manage the intersection of regulation, operational resilience, cybersecurity, AI and risk for these clients.

Are the financial terms of the Concentrix–CastleHill transaction disclosed?

No. The announcement states that terms of the transaction were not disclosed, so no purchase price or other financial conditions are provided.

Which technology partnerships does CastleHill contribute to Concentrix’ risk and compliance offerings?

CastleHill brings strategic partnerships with Archer, ProcessUnity, and OneTrust, which support its GRC and third-party risk solutions and will now complement Concentrix’ broader risk and compliance services.