A Vilnius startup just secured seed funding to build what amounts to an AI-powered dossier engine. The implications extend well beyond the Baltic tech scene.
When a company raises €2.6 million to aggregate, analyze, and package publicly available information about individuals into structured reports, the policy antennae should twitch. Not because the technology is inherently problematic – it may prove genuinely useful – but because it sits precisely at the intersection of several unresolved European debates: data protection enforcement, AI transparency obligations, and the murky boundaries of publicly available information.
WhiteBridge AI's seed round, led by FIRSTPICK VC with participation from First Degree, NGL.VC, Scalewolf.VC, BADideas.fund, Nectolabs, Plug and Play, and several angel investors, closed at $3 million (approximately €2.6 million at current exchange rates). The Vilnius-based company, founded in 2024 by Tomas Martūnas, Irmantas Motiejūnas, Justinas Barauskas, and Paulius Taraškevičius, has built a platform that compiles data from social media, news sources, and other online records into what it calls actionable reports.
The use cases span sales preparation, partner validation, third-party screening, and personal digital footprint management. The mechanism: enter a name or social profile link, and the system returns a structured analysis including career history, social media activity, behavioral insights, and publicly reported events.
The Product Logic
Understanding what WhiteBridge actually does requires disaggregating the technical claims from the market positioning.
The platform aggregates scattered online data – email addresses, phone numbers, professional histories, media coverage, hobbies – and applies AI to identify patterns and flag potential inconsistencies. According to the company's statements, the emphasis falls on data provenance and verification, aiming to provide clear context rather than unverified claims.
Co-founder Tomas Martūnas frames the value proposition around clarity:
With WhiteBridge, we're here to bring clarity and control to that chaos. Our platform gives people and businesses a reliable way to understand and manage online identity signals – so they can act with confidence.
Tomas Martūnas
The investor thesis, articulated by Dmitrij Sosunov of FIRSTPICK VC, centers on execution speed:
What sold us wasn't just the market – it was the team. They're quick, practical, and they ship. In a fast-moving AI space, that's the advantage.
Dmitrij Sosunov
Both statements reveal something about how the company and its backers understand the competitive landscape. Speed to market matters. The ability to aggregate and structure information faster than manual research provides immediate commercial value. Whether that value persists as regulatory frameworks tighten remains an open question.
The Regulatory Terrain
People search engines are not new. What distinguishes the current generation is the application of AI to pattern recognition, behavioral inference, and risk flagging. This shifts the product from aggregation toward analysis – and analysis triggers different regulatory considerations.
Under the EU AI Act, which entered into force in 2024 with phased implementation extending through 2027, AI systems used for evaluation of natural persons in employment, creditworthiness, or access to essential services face heightened transparency and documentation requirements. The classification depends heavily on deployment context. A tool used for sales preparation occupies different regulatory territory than one used for tenant screening or employee background checks.
The General Data Protection Regulation (GDPR) adds another layer. Publicly available data does not automatically mean freely processable. The legal basis for aggregating, profiling, and commercializing information about individuals requires careful analysis – particularly when the data subjects have no direct relationship with the platform processing their information.
WhiteBridge operates from Lithuania, which means the Lithuanian State Data Protection Inspectorate holds primary supervisory authority. How that authority interprets the platform's compliance posture will matter for the company's scaling trajectory across the EU.
The Baltic Context
Lithuania has emerged as a credible node in Europe's AI startup geography. The country combines relatively low operating costs, strong technical education pipelines, and a regulatory environment that – while fully aligned with EU frameworks – tends toward pragmatic implementation.
Vilnius specifically has cultivated a fintech and deep-tech cluster, with companies like Vinted, Nord Security, and Oxylabs demonstrating that Baltic startups can scale to European and global relevance. WhiteBridge fits this pattern: a technically sophisticated product addressing a genuine market need, built by a team with prior operational experience.
The investor syndicate reflects this positioning. FIRSTPICK, based in the Baltics, has a track record of backing early-stage companies in the region. The participation of Plug and Play, a Silicon Valley-headquartered accelerator with global reach, signals that the company's ambitions extend beyond regional markets.
What to Watch
Several dynamics will shape WhiteBridge's trajectory – and, by extension, the broader category of AI-powered people research tools in Europe.
Enforcement posture
Data protection authorities across Europe have shown uneven appetite for pursuing cases involving publicly available data aggregation. A high-profile enforcement action against a similar platform could reshape the risk calculus for the entire sector.
Use case drift
Products designed for one purpose often migrate toward others. Sales preparation tools become background check tools. Background check tools become surveillance tools. The governance challenge lies in maintaining boundaries as commercial pressures push toward expansion.
Competitive response
WhiteBridge is not alone in this space. Clearbit, ZoomInfo, and various OSINT (Open Source Intelligence) platforms offer overlapping capabilities. The question is whether WhiteBridge's AI-driven approach delivers sufficient differentiation to sustain pricing power and market share.
Subject access requests
Under GDPR, individuals have the right to access data held about them and, in certain circumstances, to request deletion. A platform that aggregates information about millions of people faces operational complexity in responding to such requests at scale. How WhiteBridge handles this will test both its technical architecture and its compliance infrastructure.
The Broader Signal
Beyond the company-specific analysis, this raise reflects a broader pattern: European investors are backing AI applications that operate in regulatory gray zones, betting that execution speed and product quality will outpace enforcement timelines.
This is not necessarily reckless. Regulatory uncertainty creates opportunity for companies willing to navigate ambiguity. The AI Act's risk-based approach explicitly permits many AI applications without prior authorization, placing the compliance burden on deployers rather than developers in numerous contexts.
But it does create a particular kind of European AI ecosystem – one where the most commercially viable applications often sit at the edges of regulatory clarity, and where the relationship between innovation and governance remains perpetually negotiated rather than settled.
WhiteBridge's €2.6 million seed round is, in this sense, a small data point in a much larger pattern. The company may succeed or fail on its own merits. The category it represents – AI-powered analysis of individuals based on aggregated public data – will persist regardless, raising questions that European policymakers, technologists, and citizens will need to answer together.
The conversation about where AI-powered identity analysis fits within European values and legal frameworks is far from resolved. For those working through these questions – founders building in regulated spaces, investors assessing compliance risk, policymakers drafting implementation guidance – Human x AI Europe in Vienna on May 19 offers a venue where these tensions can be examined directly, with the people actually making the decisions in the room.
Frequently Asked Questions
Q: What does WhiteBridge AI's platform actually do?
A: WhiteBridge AI aggregates publicly available information about individuals from social media, news sources, and online records, then uses AI to analyze this data and generate structured reports including career history, behavioral insights, and potential risk indicators.
Q: How much funding did WhiteBridge AI raise and from whom?
A: The company raised $3 million (approximately €2.6 million) in a seed round led by FIRSTPICK VC, with participation from First Degree, NGL.VC, Scalewolf.VC, BADideas.fund, Nectolabs, Plug and Play, and several angel investors.
Q: When was WhiteBridge AI founded and who are the founders?
A: WhiteBridge AI was established in 2024 in Vilnius, Lithuania, by four co-founders: Tomas Martūnas, Irmantas Motiejūnas, Justinas Barauskas, and Paulius Taraškevičius.
Q: What are the primary use cases for WhiteBridge AI's platform?
A: The platform targets professional applications including sales preparation, partner validation, third-party screening, and personal digital footprint management for individuals wanting to understand their own online presence.
Q: How does GDPR affect AI-powered people search platforms like WhiteBridge?
A: GDPR requires a valid legal basis for processing personal data, even when that data is publicly available. Platforms aggregating and profiling individuals must address data subject rights including access requests and, in certain circumstances, deletion requests.
Q: What regulatory classification might WhiteBridge AI face under the EU AI Act?
A: Classification depends on deployment context. AI systems used for evaluating individuals in employment, creditworthiness, or access to essential services face heightened requirements, while tools used purely for sales preparation may face lighter obligations.