London, twelve months after the last one
Jamie Daum runs a company that did not exist four years ago, and on 30 July his firm announced a 50 million dollar Series C led by Insight Partners, with Dawn Capital and Meritech Capital taking part. Inforcer was founded in 2023 in London. Its own announcement that day put the money behind platform growth and what it calls AI innovation for managed service providers. The prior two rounds came to 60 million dollars, which puts total funding at 110 million across three rounds in eighteen months. The Series B, 35 million dollars led by Dawn Capital, closed in July 2025. This round closed twelve months later.
What the company sells is unglamorous and load-bearing. Small businesses mostly cannot staff an IT department, so they outsource to a managed service provider, and that provider then has to run Microsoft 365 for dozens or hundreds of separate client tenants at once. Inforcer is the console that makes one operator capable of that. At its last round the company reported serving more than 800 managed providers, with offices in the United States, the United Kingdom, the Netherlands, Denmark and Australia. Recent additions include detection of unsanctioned AI tools inside customer tenants, and threat detection and response.
Three links in the chain, and you signed one
Follow the contracts rather than the marketing and the structure becomes uncomfortable. A small manufacturer signs with a managed provider. The managed provider signs with Inforcer, or with one of its competitors. Nothing connects the manufacturer to the platform, and yet the platform is the thing that standardises security policy across that manufacturer's Microsoft 365 tenant, because multi-tenant management is not possible without administrative reach into each tenant being managed. The party with the deepest technical access is the party furthest from the customer's signature.
This is not an allegation about one company. It is the shape of the market, and it is the shape that makes the round worth a paragraph in a European owner's file. Under the GDPR the processor chain has to be documented, and a sub-processor that holds administrative rights over an environment containing personal data belongs in that documentation whether or not anyone thought to put it there. Most small buyers have never seen the name. The practical test is short: ask your provider which platforms hold administrative access to your tenant, and see how long the answer takes.
The price grew more slowly than the business
Two disclosed figures sit next to each other and are worth dividing. The company reports 300 per cent year-on-year growth, and its chief executive says the valuation doubled between the Series B and this round, without giving the absolute number. Growth of that size against a doubling means the multiple compressed: whatever investors paid per unit of revenue in July 2025, they paid less for it in July 2026. That is the opposite of what a category in a bubble looks like.
Why it matters. A compressing multiple on accelerating revenue usually means the money is being priced on durability rather than on a story, and durability in this category comes from switching costs. A platform that holds standardised policy across hundreds of providers and their clients is difficult to leave, which is exactly what makes it a sound investment and exactly what should make a buyer read the exit terms. The same property that justified the cheque is the property that will price your renewal in three years.
The company is publishing the problem it sells against
Read the vendor's own output from the four weeks before the round and a consistent argument appears. On 21 July it published a note titled around Microsoft having become the leading attack surface for managed providers. On 28 July, two days before the funding, it published an anatomy of a Microsoft 365 breach that leaves little visible trace. Earlier in the month it covered the retirement of the Essential Eight baseline and what should replace it. Daum's framing in the round coverage is that attacks now take minutes to execute rather than months to plan.
Yes, but. A vendor describing a threat it profits from is not disqualified from being right, and none of those pieces stops being accurate because a funding round followed them. The correct use of that material is as a reading list rather than as a purchase argument. The questions they raise apply to whichever platform your provider has chosen, including the one it chose before this round existed, and the answers should come from your provider rather than from the vendor's blog.
Four questions for your provider this week
Start by asking which platforms hold administrative access to your Microsoft 365 tenant, and get the list in writing rather than over a call. Then ask what happens to that access when you leave: whether it is revoked at termination, who confirms the revocation, and how you would verify it independently. Third, ask whether the platform's tooling for detecting unsanctioned AI use is switched on in your tenant, because a control that exists in the product and not in your configuration protects nobody.
The fourth question is the one people skip. Ask your provider what happens to your arrangement if the platform is acquired. Insight Partners is a growth investor and this is a category that consolidates, so the realistic path for a company that has raised 110 million dollars in eighteen months runs toward an eventual sale, and whoever buys it inherits administrative reach across every tenant on the platform. That is not a reason to avoid managed providers, which remain the right answer for most small companies. It is a reason to know the name of every firm holding your keys before somebody else buys it.
Read next: The Cheaper Plan Was Behind the Cancel Button | Blocking the Crawler Is What Published Your Chats
