other

Updated:

Saropa

Craig Hathaway founded Saropa in 2010, building crisis-management software trusted by over 50,000 users.

Saropa

Saropa started in 2010 as an Australian fintech and online-security operation under Craig Hathaway. The founding thesis was not market-share capture but preparedness: building digital tools that function under duress, when disorganization puts people at real risk. That origin produced Saropa Contacts, the firm's central consumer product, which bundles offline-accessible emergency numbers for 195+ countries, biometric locking, and 588 first-aid tips. The company is headquartered in Melbourne, with additional offices in Sydney and New York City. Saropa deploys exclusively into its own software portfolio, spanning consumer mobile applications and a developer-ecosystem suite. Its flagship address book acts as an emergency lifeline; companion app Kykto provides ephemeral 24-hour note capture. On the infrastructure side, Saropa publishes a growing set of open-source Dart and Flutter packages used by external developers for linting, debugging, and dependency health scanning — including saropa_lints, which maps rules to the OWASP Top 10. Geographic delivery spans 195+ countries, with particular localization depth in Australia, Pakistan, Nigeria, the United Kingdom, and the United States, reflecting a globally distributed contributor team. The firm operates without disclosed external funding or a multi-family structure. In addition to consumer and developer products, Saropa publishes a quarterly transparency report — a self-reported record covering government requests, data breaches, takedowns, aggregate analytics volume, and a complete list of third-party SDKs that touched user data — with hash-ledger verification and CC0 licensing. In September 2024, Saropa updated its VS Code extension suite with an AI Governance tool that tracks Claude API costs in real time and enforces daily and monthly budgets directly from the editor status bar. Saropa's structural differentiator is its self-funding product-company posture inside a space usually occupied by asset allocators or service firms. It does not manage third-party capital, does not anchor fund commitments, and does not participate in co-investment clubs. Instead, every operational decision flows from a survival-first engineering culture: own the product, publish the audit trail, and treat the address book as critical infrastructure rather than a commodity.

Website
saropa.com

General information

Firm type

other

Year founded

2010

AUM

Undisclosed

Location

Region

Oceania

Country

Australia

City

Melbourne

Corporate office

Victoria, Australia

Additional offices

Sydney, Australia · New York City, USA

Principals

Craig Hathaway

Founder

Sector focus

Enterprise SoftwareCybersecurity

Frequently asked questions

How does Saropa fund its operations, and does it manage external capital?

Saropa is a bootstrapped Australian software company that does not manage external capital or operate as a family office. All product development — from Saropa Contacts to its open-source Flutter toolchain — is funded through the firm's own revenue and maintained without disclosed outside investors. The company structure remains an independent proprietary limited entity (Saropa Pty Ltd) with no arm dedicated to fund commitments or third-party asset management.

What is Saropa's relationship to the developer-ecosystem packages it publishes?

Saropa builds and maintains these packages as production-hardened tools extracted from its own app development work. Examples include a Dart linter with rules mapped to the OWASP Top 10 and a Drift database viewer for VS Code. They are open-source and designed for external use, but they also serve as public evidence of the engineering standards the company applies internally.

Does Saropa share or sell user data from its mobile applications?

No. The company publicly commits to on-device data storage by default for Saropa Contacts, with optional sharing only when a user explicitly enables it. Saropa complements its privacy policy with a quarterly transparency report that discloses every third-party SDK that touched user data during the period, accompanied by a hash-ledger verification system for audit integrity.

How does Saropa handle government data requests?

Government requests are disclosed in Saropa's quarterly transparency reports, which are published regardless of whether any requests were received. The running record of zero-incident quarters is part of the firm's stated accountability mechanism. Reports are released under CC0 in HTML, Markdown, and JSON formats, with SHA-256 hashes posted to an append-only ledger and mirrored on an independent public repository.

What is Saropa's posture toward co-investments or partnerships with external GPs?

Saropa does not participate in co-investments, club deals, or fund commitments. It functions as a standalone product company rather than a capital allocator. Its external engagement takes the form of developer-tool maintenance and transparency-report publishing, not pooled investment vehicles or LP relationships.

Profile maintained by using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.

Need institutional-grade insight on investors?

Altss delivers:

Principals with verified direct contactsAllocation history by asset classOSINT-derived deal signals
Book a demo

Prefer a guided tour?

We’ll walk you through:

Interactive funding timelinesCustom mandate & allocation filters
Book a demo

More Melbourne other profiles