ToggleNow is building the backbone of SAP GRC for mid-sized enterprises

Founded in 2012, Hyderabad-based Togglenow offers SAP security and GRC consulting, implementation, and automation solutions. It serves over 4,250 clients across India, the US, the UK, Canada, and Singapore.

May 30, 2025 - 10:10

ToggleNow is building the backbone of SAP GRC for mid-sized enterprises

As businesses increasingly migrate to digital ecosystems, the demand for robust governance, risk, and compliance (GRC) frameworks within ERP environments has shot up.

SAP is widely considered one of the leading enterprise resource planning systems, however, it has long posed significant challenges around access governance, cybersecurity, and compliance automation, especially for mid-sized organisations with limited resources.

ToggleNow is taking on established players in this space, building tools and services tailored to streamline GRC and security within SAP environments.

It has a total team strength of 126 employees, with 96 based in India and 30 located across international markets.

From dormancy to foundation

ToggleNow was formally incorporated in 2012 by Raghu Boddu and Santosh Nasine. However, the company did not begin operations immediately as, at the time, Raghu was employed at IBM.

“It was a period of deliberation. I wasn’t ready to jump into starting up without fully understanding what it entails. I decided to spend some time learning, observing, and preparing before making the transition,” Boddu, Managing Director, ToggleNow, recalls in a conversation with YourStory.

The experience at IBM allowed him to gain practical insight into the mechanics of building a business, and he decided to leave the job in 2014. Boddu and Nasine were professionally acquainted. They connected through shared work interests in the SAP domain and had complementary skill sets in SAP security, compliance, and technology consulting.

With a mutual understanding of the challenges in enterprise security and governance, they decided to co-found ToggleNow, combining their expertise to build a focused solution for SAP-based cybersecurity and GRC automation.

By 2017, ToggleNow had finally begun its operations, bootstrapped with an initial investment of Rs 10 lakh from the co-founders.

Defining a specialisation

Headquartered in Hyderabad, ToggleNow is a consulting and technology firm focused on SAP security and GRC automation. It assists enterprises, including Fortune 500 firms and small-to-medium enterprises, in managing compliance and security in complex SAP landscapes.

“We chose to focus on a specific challenge: the difficulties enterprises face in managing access controls, compliance audits, and Segregation of Duties (SoD). Our goal was to simplify that process and make it measurable,” explains Boddu.

SoD mechanisms are an internal control used to minimise the risk of errors and fraud within SAP systems.

ToggleNow has a locally tailored platform that supports real-time access monitoring, automated provisioning, SoD analysis, and audit readiness across SAP environments. Integrating with tools like SAP IAG, BTP, IAS, and IPS, its solutions span four core areas: access governance, data protection, cybersecurity, and control and audit. These solutions are typically priced between Rs 10-15 lakh, based on the client’s SAP landscape size and complexity.

Building proprietary tools and frameworks

Over the years, ToggleNow developed multiple proprietary tools designed to reduce manual workloads and improve compliance accuracy. Solutions like ReviewNow and Verity automate up to 99% of access reviews and continuously scan for SoD conflicts, reportedly identifying and helping eliminate over 100,000 access violations for clients.

Another solution, the Offline SoD Analysis tool, enables organisations to assess access risks without installing additional software, helpful particularly in early-stage security adoption.

The company has also introduced FourEdge GRC, a four-phase framework that helps organisations mature their compliance programmes gradually.

“Automation can’t be deployed in a vacuum. FourEdge gives our clients a roadmap—from basic visibility to full-scale automation,” says Boddu.

ToggleNow’s AI-driven automation agents, branded as Digybots, conduct recurring compliance tasks such as license audits, ITGC report generation, and SoD monitoring autonomously.

As of 2024, ToggleNow serves over 4,250 clients across India, the US, the UK, Canada, and Singapore, with adoption in highly regulated sectors such as speciality chemicals, battery manufacturing, industrial materials, and finance.

“Some industries face regulatory scrutiny at multiple levels—internal, national, and international. Our value has been in making that complexity more manageable, not necessarily simpler, but certainly more structured,” he notes.

Its service stack includes SAP GRC module implementation (access control, risk management, fraud management), SAP licensing and audit services, DPDP Act alignment for Indian clients, and custom cybersecurity integration for both cloud and on-premise systems.

Parallel ventures and ecosystem thinking

Recognising broader gaps in enterprise security and digital readiness, Boddu co-founded two additional ventures.

In 2022, he started Web Anatomy, a digital strategy firm originally created to support ToggleNow’s internal needs but later evolved to a standalone startup. It offers user experience design, product strategy, and web presence solutions for startups and mid-sized enterprises.

Next year, he launched ThreatSense.AI, a cybersecurity product venture focused on real-time threat detection tailored specifically for SAP environments. The product is in the minimum viable product (MVP) stage and is scheduled for release in mid-2025.

The startup was incubated at T-Hub Hyderabad and has since expanded its footprint to the UK.

“Threat detection within SAP systems has often been an afterthought or is priced beyond the reach of mid-sized companies. We’re trying to build something native, relevant, and accessible,” Boddu explains.

The financial progress

Looking forward

India's GRC market, valued at $1.6 billion in 2024, is projected to reach $4.1 billion by 2033, with a CAGR of 11.2%, according to IMARC.

Togglenow’s roadmap includes listing on the BSE SME and NSE Emerge platforms by FY27. The founders see the IPO as a structural shift to bring more transparency and discipline for future growth.

“We’ve been deliberate about how we grow—measured but progressive. A listing will help us expand R&D efforts and create deeper collaborations with enterprise customers,” Raghu says.

ToggleNow is investing in AI-based compliance tools, threat intelligence solutions, and analytics modules customised for SAP environments. With a strong belief in balancing productisation with service support, the company aims to become a reliable backbone for enterprise GRC, without overreliance on marketing or scale-at-all-costs strategies.

It competes with large system integrators like Deloitte, KPMG, and Mahindra.

Edited by Kanishk Singh