Spring Labs acquires Winnow to connect 100,000 legal requirements to bank workflows

Why it matters

Spring Labs is moving from AI agents for customer-service and dispute work into the compliance systems that govern those operations. Winnow gives it an attorney-maintained regulatory library and an existing regulatory-content operation, so Spring Labs can build on material already organized for the market instead of starting a library from scratch. Customer adoption and the accuracy of the rule-to-workflow links will determine whether SpringGRC becomes a useful compliance tool.

Spring Labs CEO John Sun is adding an attorney-built library of more than 100,000 state and federal requirements to Spring Labs' financial-services AI platform through its acquisition of regulatory-compliance software provider Winnow. The acquisition, announced in a PR Newswire release dated October 7th, gives Spring Labs the legal-content foundation for SpringGRC, a platform that links regulations to the compliance work banks and fintechs perform.

For Sun, whose earlier fintech career included co-founding Avant and debt-management startup DebtEye, the deal takes Spring Labs into a problem he says financial institutions have long handled separately: keeping operational processes aligned with changing rules. He told the release, "Every bank compliance program comes down to one question: are we doing what the rules require, and can we prove it?" The product bet is that a software platform can connect those requirements to the policies, controls, tests and cases that demonstrate how an institution meets them.

Spring Labs said SpringGRC is available in limited beta to existing Spring Labs and Winnow customers, with general availability planned for the fourth quarter of 2026. The release does not give a specific launch date. It describes the product as combining regulatory tracking, policies and procedures, controls, testing and case management, with each piece of work traceable to the law or regulation it addresses.

A content business inside an AI platform

The acquisition brings together two different kinds of work. Spring Labs has built AI agents for financial institutions' customer experience, complaints and disputes operations. Winnow contributes a structured library of legal requirements maintained by attorneys and other professionals. Spring Labs says SpringGRC will use that library to identify workflows that may be affected when regulations change and help compliance teams keep those workflows current.

A list of regulatory updates can tell a compliance team that a rule changed; connecting the rule to specific obligations and internal work is the heavier operational task. Spring Labs' announcement describes Winnow's library as the map for making that connection. Whether the combined platform can keep those links accurate as regulations and customer processes change will be a test of SpringGRC's promise.

Winnow co-founder and President Chris Hilliard brings direct compliance experience to the combination. Winnow identifies Hilliard as a certified regulatory compliance manager with more than 20 years in banking, lending and fintech compliance. In the announcement, he said Winnow's customers rely on it to track rules that apply to them and flag changes before they take effect. That existing regulatory-content operation gives Spring Labs a starting point beyond building a new library from scratch.

Winnow's history also includes legal-sector stewardship. The release says the product was launched by Buckley and further developed by Orrick after the firms combined in 2023. Orrick will continue to support content updates and quality assurance. A law firm will remain involved in maintaining the material at the center of SpringGRC as Spring Labs brings the product into its software platform.

SpringGRC reaches beyond customer-service tasks

The deal extends Spring Labs beyond automating discrete customer-service and case-management tasks. Spring Labs describes its existing agents as handling complaint detection and triage, conversation scoring and dispute-management work. SpringGRC reaches further into the control system around those activities: the rules, documented procedures, testing and evidence that institutions use to manage regulated operations.

The limited beta gives Spring Labs and Winnow a defined group for early use, while adoption at scale remains unproven. The announcement does not provide SpringGRC customer counts, revenue or pricing, so the launch plan describes availability, not demonstrated market demand.

Spring Labs raised $5 million in May 2026, in a round led by BankTech Ventures and Haymaker Ventures. At the time, Spring Labs described its plan as expanding from complaint and dispute agents into broader compliance workflows. The Winnow acquisition puts a specific asset behind that direction: regulatory content already organized for financial institutions. The funding announcement and acquisition do not establish how much Spring Labs paid for Winnow or how the deal was financed.

Sun's path helps explain why Spring Labs is pursuing the problem. Before launching it, he led data and analytics at Enova Financial, co-founded DebtEye, and served as Avant's chief credit officer and UK general manager. Spring Labs' biography says Sun saw financial institutions repeatedly solving fragmented data, compliance and security problems on their own. SpringGRC applies that thesis to a concrete workflow: connecting a rule to the work an institution does to comply with it.

Spring Labs co-founders Kevin Lewis and Peyman Hesami also took part in the acquisition announcement, alongside Hilliard. Spring Labs has described Lewis as leading commercial operations and Hesami as leading product and technology. Spring Labs' immediate execution challenge is to retain the expertise behind Winnow's regulatory library while making its content useful inside the workflows Spring Labs already sells to banks and fintechs. The acquisition gives Spring Labs the materials and a product plan; the limited beta will show whether customers adopt SpringGRC.