{ "name": "AI compliance software", "url": "https://aicompliancelist.com/", "license": "CC BY 4.0", "cite": "AI Compliance List, https://aicompliancelist.com/", "updated": "2026-11-11", "fields": [ { "key": "category", "label": "Platform type", "type": "enum", "description": "Platform type by the product’s main focus; many products span several.", "filterable": true, "sortable": true, "enumValues": [ "AI governance", "GRC & AIMS", "Model assurance", "Data & privacy" ] }, { "key": "eu_ai_act", "label": "EU AI Act", "type": "enum", "description": "Documented: the vendor’s product pages describe templates, control mappings, assessments or evidence for the EU AI Act.", "filterable": true, "sortable": true, "enumValues": [ "Documented" ] }, { "key": "iso_42001", "label": "ISO 42001", "type": "enum", "description": "Documented: the vendor’s product pages describe templates, control mappings, assessments or evidence for ISO/IEC 42001.", "filterable": true, "sortable": true, "enumValues": [ "Documented" ] }, { "key": "nist_ai_rmf", "label": "NIST AI RMF", "type": "enum", "description": "Documented: the vendor’s product pages describe templates, control mappings, assessments or evidence for the NIST AI RMF.", "filterable": true, "sortable": true, "enumValues": [ "Documented" ] }, { "key": "deployment", "label": "Deployment", "type": "enum", "description": "Hosting options the vendor publishes for the product.", "filterable": true, "sortable": true, "enumValues": [ "SaaS", "Cloud & self-hosted", "SaaS & private cloud", "Self-hosted gateway", "Self-hosted" ] }, { "key": "pricing_model", "label": "Pricing model", "type": "string", "description": "Published billing basis or custom-quote offer. Amounts and plan scope are in the pricing notes.", "sortable": true }, { "key": "inventory", "label": "AI inventory", "type": "bool", "description": "The product keeps a register of AI systems, agents, use cases or models.", "filterable": true, "sortable": true }, { "key": "workflow", "label": "Governance workflow", "type": "string", "description": "A sourced description of review, assessment, policy or validation functionality.", "sortable": true }, { "key": "evidence", "label": "Evidence output", "type": "string", "description": "Documents, audit records, reports or traceability the product produces or maintains.", "sortable": true }, { "key": "integrations", "label": "Integrations", "type": "string", "description": "Named supported integrations or interfaces, as stated on the cited product or documentation page.", "sortable": true }, { "key": "certifications", "label": "Vendor assurance", "type": "string", "description": "Certificates and audit reports the vendor publishes for itself. SOC 2 is an audit report; ISO standards are certifications.", "sortable": true }, { "key": "pricing_notes", "label": "Scope & pricing notes", "type": "string", "description": "Plan scope, availability and billing details from the vendor’s pricing and product pages.", "sortable": true }, { "key": "monitoring", "label": "Technical monitoring", "type": "string", "description": "Technical monitoring of models and AI workloads, separate from compliance task tracking.", "sortable": true } ], "records": [ { "id": "2021-ai", "name": "2021.AI GRACE", "url": "https://2021.ai/", "summary": "GRACE combines enterprise AI infrastructure with automatic registration and monitoring.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": null, "deployment": "Cloud & self-hosted", "pricing_model": null, "inventory": true, "workflow": "Risk, controls and assessment modules", "evidence": "AI system documentation", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://2021.ai/", "title": "2021.AI GRACE — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "deployment", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "airia", "name": "Airia", "url": "https://airia.com/", "summary": "A combined control plane discovers AI assets and enforces policies on agent actions.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Risk classification, human approvals and runtime controls", "evidence": "Continuous governance documentation and decision logs", "integrations": "Jira; Slack; AWS; Snowflake; Google Cloud", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://airia.com/", "title": "Airia — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "arthur", "name": "Arthur", "url": "https://www.arthur.ai/", "summary": "Agent discovery and observability provide enterprise policy controls and security oversight.", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Continuous risk assessment and global or use-case policies", "evidence": "Audit logs, lineage and step-level agent traces", "integrations": "CrowdStrike Falcon; Elastic; Splunk; Datadog", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.arthur.ai/", "title": "Arthur — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "asenion", "name": "Asenion AI Control System", "url": "https://asenion.ai/", "summary": "Contextual policy packs connect lifecycle assessment, pre-release validation and runtime controls.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Risk tiering, verification and runtime policy enforcement", "evidence": "Tamper-resistant control and decision records", "integrations": null, "certifications": "ISO/IEC 42001 and ISO/IEC 27001 for the AI Control System", "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://asenion.ai/", "title": "Asenion AI Control System — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence", "certifications" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "aws-ai-governance", "name": "AWS SageMaker AI governance", "url": "https://docs.aws.amazon.com/sagemaker/latest/dg/governance.html", "summary": "Model Cards, Model Dashboard and Role Manager give AWS ML teams model documentation, risk ratings and least-privilege access in one account.", "hq": "US", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": "SaaS", "pricing_model": "Pay per AWS service used", "inventory": true, "workflow": "Model Cards record intended uses, risk ratings, training details and evaluation results", "evidence": "Audit Manager generative AI best practices framework v2 collects evidence for Bedrock and SageMaker AI", "integrations": "Amazon Bedrock; Amazon SageMaker AI; AWS Audit Manager; IAM", "certifications": "ISO/IEC 42001 accredited certification for Amazon Bedrock, Amazon Q Business, Amazon Textract and Amazon Transcribe (November 2024)", "pricing_notes": "AWS Audit Manager is closed to new customers; existing customers keep the service.", "monitoring": "Model Dashboard: one view of every model in the account" }, "sources": [ { "url": "https://docs.aws.amazon.com/sagemaker/latest/dg/governance.html", "title": "AWS: SageMaker model governance", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "monitoring" ] }, { "url": "https://docs.aws.amazon.com/audit-manager/latest/userguide/aws-generative-ai-best-practices.html", "title": "AWS Audit Manager: generative AI best practices framework v2", "accessed": "2026-11-11", "fields": [ "evidence", "integrations", "pricing_notes", "deployment" ] }, { "url": "https://aws.amazon.com/sagemaker/pricing/", "title": "Amazon SageMaker pricing", "accessed": "2026-11-11", "fields": [ "pricing_model" ] }, { "url": "https://aws.amazon.com/blogs/machine-learning/aws-achieves-iso-iec-420012023-artificial-intelligence-management-system-accredited-certification/", "title": "AWS achieves ISO/IEC 42001:2023 accredited certification", "accessed": "2026-11-11", "fields": [ "certifications" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "bigid", "name": "BigID", "url": "https://bigid.com/solutions/ai-governance/", "summary": "Data-driven AI governance links systems and agents to the data they use.", "tags": [ "Data & privacy" ], "fields": { "category": "Data & privacy", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": "Cloud & self-hosted", "pricing_model": null, "inventory": true, "workflow": "Data-layer policy enforcement and risk assessments", "evidence": "Data lineage and audit trails", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://bigid.com/solutions/ai-governance/", "title": "BigID — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "deployment", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "collibra", "name": "Collibra AI Command Center", "url": "https://www.collibra.com/products/ai-command-center", "summary": "AI asset oversight connects agents and models to data lineage and business context.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Assessment templates and lifecycle approval decisions", "evidence": "Data-to-agent lineage; control evidence and approvals", "integrations": "Databricks; Microsoft Foundry; AWS Bedrock; Gemini", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.collibra.com/products/ai-command-center", "title": "Collibra AI Command Center — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "nist_ai_rmf", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "compyl", "name": "Compyl", "url": "https://compyl.com/iso-42001/", "summary": "A GRC platform supports AI management controls alongside enterprise compliance work.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": "Packages by framework scope and modules", "inventory": null, "workflow": "AI impact assessments, control monitoring and remediation tasks", "evidence": "Exportable evidence packs mapped to controls and clauses", "integrations": "MLflow; Snowflake", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://compyl.com/iso-42001/", "title": "Compyl — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "iso_42001", "eu_ai_act", "nist_ai_rmf", "workflow", "evidence", "integrations" ] }, { "url": "https://compyl.com/pricing/", "title": "Compyl pricing factors", "accessed": "2026-11-11", "fields": [ "pricing_model" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "cranium", "name": "Cranium AI", "url": "https://cranium.ai/", "summary": "AI supply-chain governance joins discovery, runtime observation and policy enforcement.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Policies mapped to frameworks and internal standards", "evidence": "AI bills of materials and shareable AI Cards", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://cranium.ai/", "title": "Cranium AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "nist_ai_rmf", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "credo-ai", "name": "Credo AI", "url": "https://www.credo.ai/", "summary": "A registry and policy engine connect enterprise AI assets to regulatory requirements and controls.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Policy packs and contextual risk assessments", "evidence": "Recorded evidence and compliance mapping", "integrations": "Snowflake; Databricks; AWS; Azure; ServiceNow; Jira; MLflow", "certifications": "SOC 2 Type II report (independent auditor; annual audit)", "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.credo.ai/", "title": "Credo AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence", "integrations" ] }, { "url": "https://www.credo.ai/legal/soc-2-type-ii-compliance", "title": "Credo AI: SOC 2 Type II compliance", "accessed": "2026-11-11", "fields": [ "certifications" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "dataiku", "name": "Dataiku Govern", "url": "https://www.dataiku.com/product/govern-ai-everywhere", "summary": "Dataiku connects AI inventory and sign-offs to lineage and technical monitoring.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Approval processes, policy checks and deployment gates", "evidence": "Reusable documentation and end-to-end lineage", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.dataiku.com/product/govern-ai-everywhere", "title": "Dataiku Govern — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "datarobot", "name": "DataRobot", "url": "https://www.datarobot.com/product/ai-governance/", "summary": "AI governance combines central policies, model documentation and production controls.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": "Documented", "deployment": "Cloud & self-hosted", "pricing_model": null, "inventory": true, "workflow": "Centralized policies and pre-deployment red teaming", "evidence": "Automated compliance documents and lineage", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.datarobot.com/product/ai-governance/", "title": "DataRobot — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "nist_ai_rmf", "deployment", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "deeploy", "name": "Deeploy", "url": "https://deeploy.ai/", "summary": "Runtime AI governance combines system discovery, control frameworks and production monitoring.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": "SaaS & private cloud", "pricing_model": "Monthly platform fee plus per-seat fee", "inventory": true, "workflow": "Risk controls, release approvals and request guardrails", "evidence": "Monitoring records, agent traces and audit evidence", "integrations": "MLflow; Databricks; SageMaker; Azure ML; Hugging Face", "certifications": "ISO/IEC 27001 and ISO/IEC 42001; BSI named as certification body", "pricing_notes": "Core is SaaS; Scale offers SaaS or private cloud; Enterprise is managed private cloud. Fees are quoted, not listed.", "monitoring": null }, "sources": [ { "url": "https://deeploy.ai/", "title": "Deeploy — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "inventory", "workflow", "evidence", "certifications" ] }, { "url": "https://deeploy.ai/plans/", "title": "Deeploy plans", "accessed": "2026-11-11", "fields": [ "nist_ai_rmf", "deployment", "pricing_model", "integrations", "pricing_notes" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "drata", "name": "Drata", "url": "https://drata.com/frameworks/iso-42001", "summary": "ISO 42001 workflows link AI-specific risks to control owners and evidence.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": null, "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": null, "workflow": "Control-task reviews, remediation and policy approvals", "evidence": "Centralized evidence and policy version history", "integrations": null, "certifications": "ISO/IEC 42001 certified (announced 2 December 2025)", "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://drata.com/frameworks/iso-42001", "title": "Drata — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "iso_42001", "workflow", "evidence" ] }, { "url": "https://drata.com/blog/iso-42001-certification", "title": "Drata certification announcement", "accessed": "2026-11-11", "fields": [ "certifications" ] }, { "url": "https://drata.com/blog/introducing-nist-ai-rmf-framework-support", "title": "Drata: NIST AI RMF framework support", "accessed": "2026-11-11", "fields": [ "nist_ai_rmf" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "enzai", "name": "Enzai", "url": "https://www.enz.ai/", "summary": "AI discovery and intake feed framework mappings and agent action controls.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Legal, risk and security reviews; agent tool-call policies", "evidence": "Audit-readiness records", "integrations": "Jira; ServiceNow; Amazon Bedrock; Databricks; Azure AI Foundry", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.enz.ai/", "title": "Enzai — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "fiddler", "name": "Fiddler AI", "url": "https://www.fiddler.ai/ai-governance-risk-compliance", "summary": "Governance for models and agents connects inventories to evaluations and runtime guardrails.", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Policy enforcement, risk monitoring and compliance review", "evidence": "Traceable evaluation outcomes and audit reports", "integrations": null, "certifications": null, "pricing_notes": "Guardrails run inside your environment.", "monitoring": null }, "sources": [ { "url": "https://www.fiddler.ai/ai-governance-risk-compliance", "title": "Fiddler AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence", "pricing_notes" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "google-cloud-ai-protection", "name": "Google Cloud Security Command Center AI Protection", "url": "https://cloud.google.com/security-command-center", "summary": "Security Command Center assesses Gemini Enterprise Agent Platform workloads against Google’s AI essentials framework and adds NIST AI 600-1 privacy controls.", "hq": "US", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": "Free Standard tier; Premium subscription or pay-as-you-go; Enterprise subscription", "inventory": null, "workflow": "Compliance Manager frameworks: Google Recommended AI Essentials and NIST AI 600-1 privacy controls (preview)", "evidence": "Security compliance assessment shown automatically when AI Protection is active", "integrations": "Gemini Enterprise Agent Platform; Model Armor", "certifications": "Google Cloud, Google Workspace and Gemini app certified to ISO/IEC 42001:2023", "pricing_notes": "Premium subscriptions are priced on forecast Google Cloud spend.", "monitoring": "AI Protection for AI workloads; Model Armor for AI applications" }, "sources": [ { "url": "https://docs.cloud.google.com/security-command-center/docs/compliance-manager-frameworks", "title": "Google Cloud: Compliance Manager frameworks", "accessed": "2026-11-11", "fields": [ "category", "workflow", "evidence", "integrations", "monitoring" ] }, { "url": "https://cloud.google.com/security-command-center/pricing", "title": "Security Command Center pricing", "accessed": "2026-11-11", "fields": [ "pricing_model", "pricing_notes" ] }, { "url": "https://cloud.google.com/security/compliance/iso-42001", "title": "Google Cloud: ISO/IEC 42001", "accessed": "2026-11-11", "fields": [ "certifications" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "holistic-ai", "name": "Holistic AI", "url": "https://www.holisticai.com/", "summary": "Enterprise discovery, risk assessment and policy enforcement cover models, agents and applications.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": "SaaS", "pricing_model": null, "inventory": true, "workflow": "Approvals, deployment gates and human oversight", "evidence": "Control-linked evidence and audit trail", "integrations": null, "certifications": "ISO/IEC 27001:2022; SOC 2 Type 2 report; ISO/IEC 42001 audit scheduled", "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.holisticai.com/", "title": "Holistic AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence" ] }, { "url": "https://www.holisticai.com/trust-center", "title": "Holistic AI Trust Center", "accessed": "2026-11-11", "fields": [ "deployment", "certifications" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "hyperproof", "name": "Hyperproof", "url": "https://hyperproof.io/", "summary": "A GRC platform with out-of-the-box ISO 42001 and NIST AI RMF templates, control cross-walking and automated evidence collection.", "hq": "US", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": null, "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": null, "workflow": "Out-of-the-box framework templates with control cross-walking", "evidence": "Automated evidence collection and continuous control monitoring", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://hyperproof.io/guide-to-ai-risk-management-frameworks/", "title": "Hyperproof: AI risk management frameworks", "accessed": "2026-11-11", "fields": [ "category", "iso_42001", "nist_ai_rmf", "evidence" ] }, { "url": "https://hyperproof.io/ai-resource-library/", "title": "Hyperproof: AI resource library", "accessed": "2026-11-11", "fields": [ "workflow" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "ibm-watsonx-governance", "name": "IBM watsonx.governance", "url": "https://www.ibm.com/products/watsonx-governance", "summary": "Enterprise AI oversight combines regulatory content, risk management and continuous monitoring.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": "Cloud & self-hosted", "pricing_model": "Monthly plans; software by virtual processor core", "inventory": true, "workflow": "Policy enforcement and obligation mapping", "evidence": "Governance evidence capture and lifecycle traceability", "integrations": null, "certifications": null, "pricing_notes": "Risk & Compliance Basic starts at USD 3,500/month on IBM Cloud; Advanced starts at USD 6,450/month as enterprise software. List prices exclude taxes.", "monitoring": null }, "sources": [ { "url": "https://www.ibm.com/products/watsonx-governance", "title": "IBM watsonx.governance — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence" ] }, { "url": "https://www.ibm.com/products/watsonx-governance/pricing", "title": "IBM purchasing options", "accessed": "2026-11-11", "fields": [ "deployment", "pricing_model", "pricing_notes" ] }, { "url": "https://developer.ibm.com/articles/governing-ai-agents-watsonx-governance/", "title": "IBM Developer — watsonx.governance compliance accelerators", "accessed": "2026-11-11", "fields": [ "eu_ai_act", "iso_42001", "nist_ai_rmf" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "isms-online", "name": "ISMS.online", "url": "https://www.isms.online/iso-42001/ai-governance-software/", "summary": "An AI management system workspace integrates policies, risks and internal audits.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": null, "iso_42001": "Documented", "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": null, "workflow": "AI risk and impact registers; internal audit and corrective actions", "evidence": "Statement of Applicability and linked control evidence", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.isms.online/iso-42001/ai-governance-software/", "title": "ISMS.online — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "iso_42001", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "kertos", "name": "Kertos", "url": "https://www.kertos.io/en", "summary": "European compliance software and expert support bring AI frameworks into existing programs.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": null, "workflow": "Compliance document review and automated workflows", "evidence": "Centralized policies and compliance documents", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.kertos.io/en", "title": "Kertos — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "logicgate", "name": "LogicGate Risk Cloud", "url": "https://www.logicgate.ai/solutions/ai-governance/", "summary": "AI governance applications connect use-case assessments, policies and risk management.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": "Applications and Power Users", "inventory": true, "workflow": "Intake and assessment agents; review and approval", "evidence": "Complete audit trail for delegated governance work", "integrations": "Jira; AWS; OpenAI", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.logicgate.ai/solutions/ai-governance/", "title": "LogicGate Risk Cloud — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "pricing_model", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "lumenova", "name": "Lumenova AI", "url": "https://www.lumenova.ai/", "summary": "Agent governance combines a registry, evaluations and runtime policy controls.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Versioned dependencies, approvals and policy decisions", "evidence": "Exportable control evidence and decision records", "integrations": null, "certifications": null, "pricing_notes": "NIST support covers work under the four functions (Govern, Map, Measure, Manage), without evidence mapped to individual subcategories.", "monitoring": null }, "sources": [ { "url": "https://www.lumenova.ai/", "title": "Lumenova AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence" ] }, { "url": "https://www.lumenova.ai/solutions/eu-ai-act/", "title": "Lumenova AI — eu-ai-act product support", "accessed": "2026-11-11", "fields": [ "eu_ai_act" ] }, { "url": "https://www.lumenova.ai/solutions/nist-ai-rmf/", "title": "Lumenova AI — nist-ai-rmf product support", "accessed": "2026-11-11", "fields": [ "nist_ai_rmf", "pricing_notes" ] }, { "url": "https://www.lumenova.ai/solutions/iso-42001/", "title": "Lumenova AI — iso-42001 product support", "accessed": "2026-11-11", "fields": [ "iso_42001" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "microsoft-purview", "name": "Microsoft Purview Compliance Manager", "url": "https://learn.microsoft.com/en-us/purview/compliance-manager", "summary": "Microsoft’s compliance workspace ships premium AI regulation templates and pulls Azure AI Foundry evaluation results straight into assessments.", "hq": "US", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": "Premium template licenses", "inventory": null, "workflow": "Premium AI regulation templates; automatic assessments for AI apps and agents", "evidence": "Assessment progress, improvement actions and auditor reporting", "integrations": "Azure AI Foundry; Microsoft 365 Copilot; Security Copilot; ChatGPT Enterprise; Gemini; DeepSeek", "certifications": null, "pricing_notes": "The four AI templates (EU AI Act, ISO/IEC 23894, ISO/IEC 42001, NIST AI RMF 1.0) sit under Premium AI templates; each one used counts toward purchased premium licenses.", "monitoring": null }, "sources": [ { "url": "https://learn.microsoft.com/en-us/purview/compliance-manager-assessments", "title": "Microsoft Learn: Build and manage assessments in Compliance Manager", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "pricing_model", "workflow", "integrations", "pricing_notes" ] }, { "url": "https://learn.microsoft.com/en-us/security/security-for-ai/govern", "title": "Microsoft Learn: Govern AI apps and data for regulatory compliance", "accessed": "2026-11-11", "fields": [ "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "modelop", "name": "ModelOp Enterprise AI Command Center", "url": "https://www.modelop.com/enterprise-ai-command-center", "summary": "An enterprise system of record manages AI assets and their delivery lifecycle.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": "Self-hosted", "pricing_model": null, "inventory": true, "workflow": "Automated policy enforcement across the model lifecycle", "evidence": "Governance testing and documentation generation", "integrations": null, "certifications": null, "pricing_notes": "Installs on-premises, in private cloud or hybrid; ModelOp states it is not a public SaaS product. Unlimited seats.", "monitoring": null }, "sources": [ { "url": "https://www.modelop.com/enterprise-ai-command-center", "title": "ModelOp Enterprise AI Command Center — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "deployment", "pricing_notes" ] }, { "url": "https://www.modelop.com/ai-governance/ai-governance-companies", "title": "ModelOp governance capabilities", "accessed": "2026-11-11", "fields": [ "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "modulos", "name": "Modulos", "url": "https://www.modulos.ai/", "summary": "A governance graph links AI systems, control evidence and financial risk.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Assign control owners and review runtime findings", "evidence": "Scheduled test evidence attached to controls", "integrations": "REST API", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.modulos.ai/", "title": "Modulos — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "monitaur", "name": "Monitaur", "url": "https://www.monitaur.ai/", "summary": "Policy, model validation and monitoring support regulated enterprises, including insurers.", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Standardized governance controls and automated validation", "evidence": "Validation reporting for internal teams and auditors", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.monitaur.ai/", "title": "Monitaur — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "onetrust", "name": "OneTrust AI Governance", "url": "https://www.onetrust.com/solutions/ai-governance/", "summary": "AI intake and risk reviews connect to runtime controls for homegrown and third-party systems.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": "Admin users and AI inventory; custom quote", "inventory": true, "workflow": "Risk tiering; intake, approval and attestation", "evidence": "Assessment, policy and enforcement evidence", "integrations": "Amazon Bedrock; Microsoft Foundry; Databricks", "certifications": null, "pricing_notes": "AI Governance Cloud is the control plane; AI Guard adds an on-premises runtime.", "monitoring": null }, "sources": [ { "url": "https://www.onetrust.com/solutions/ai-governance/", "title": "OneTrust AI Governance — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence", "integrations" ] }, { "url": "https://www.onetrust.com/pricing/", "title": "OneTrust pricing and packaging", "accessed": "2026-11-11", "fields": [ "pricing_model" ] }, { "url": "https://docs.onetrust.com/en/govern-ai-systems-and-use/connect-and-enforce-ai-controls/onetrust-ai-guard-sdk-guide", "title": "AI Guard deployment guide", "accessed": "2026-11-11", "fields": [ "pricing_notes" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "optro", "name": "Optro AI Governance", "url": "https://fairnow.ai/model-risk-management-and-ai-governance/", "summary": "AI inventory and compliance controls cover models, agents and third-party applications.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Intake, reviews, approvals and risk classification", "evidence": "Evidence linked to framework controls", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://fairnow.ai/model-risk-management-and-ai-governance/", "title": "Optro AI Governance — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "quantpi", "name": "QuantPi", "url": "https://www.quantpi.com/", "summary": "A technical validation layer tests enterprise models and agents before and after deployment.", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": null, "workflow": "System and component validation; release gates", "evidence": "Test results with statistical confidence intervals", "integrations": "MCP; GRC tools; CI/CD workflows", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.quantpi.com/", "title": "QuantPi — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "regulativ", "name": "Regulativ.ai", "url": "https://www.regulativ.ai/", "summary": "A configurable compliance platform supports AI regulations alongside broader regulatory obligations.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": "Cloud & self-hosted", "pricing_model": null, "inventory": null, "workflow": "Custom assessments, audits and policy alignment", "evidence": "Compliance artifacts, evidence collection and audit reports", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.regulativ.ai/", "title": "Regulativ.ai — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "deployment", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "relyance", "name": "Relyance AI", "url": "https://www.relyance.ai/use-cases/ai-governance", "summary": "AI discovery maps systems, agents and their data exposure for governance teams.", "tags": [ "Data & privacy" ], "fields": { "category": "Data & privacy", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Risk review tied to ownership and data access", "evidence": "AI system and data-flow traceability", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.relyance.ai/use-cases/ai-governance", "title": "Relyance AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "saidot", "name": "Saidot", "url": "https://www.saidot.ai/", "summary": "A connected governance record links AI agents to owners, risks, controls and dependencies.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": "Subscription", "inventory": true, "workflow": "Control inheritance and platform-based reviews", "evidence": "Reusable control evidence and transparency reports", "integrations": "Azure AI Foundry; Amazon Bedrock; REST API; webhooks; MCP", "certifications": "ISO/IEC 27001:2022 ISMS; Prescient Security named as certification body", "pricing_notes": "Subscription plans; amounts are quoted on request.", "monitoring": null }, "sources": [ { "url": "https://www.saidot.ai/", "title": "Saidot — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence", "certifications" ] }, { "url": "https://www.saidot.ai/pricing", "title": "Saidot pricing FAQ", "accessed": "2026-11-11", "fields": [ "pricing_model", "integrations", "pricing_notes" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "sap", "name": "SAP AI Agent Hub / LeanIX", "url": "https://learning.sap.com/courses/governing-ai-with-sap-leanix/identifying-the-ai-governance-implementation-process-in-sap-leanix_f6e9ba70-9af8-42d9-a190-5ab3d1f704c2", "summary": "Enterprise architecture context connects AI agents and models to usage, risk and formal approval.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Risk classification and verification records", "evidence": "Architecture decisions and governance KPI reports", "integrations": "SAP AI Core; Jira; SAP Cloud ALM", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://learning.sap.com/courses/governing-ai-with-sap-leanix/identifying-the-ai-governance-implementation-process-in-sap-leanix_f6e9ba70-9af8-42d9-a190-5ab3d1f704c2", "title": "SAP AI Agent Hub / LeanIX — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "sas", "name": "SAS AI Governance", "url": "https://www.sas.com/en_us/solutions/ai/governance.html", "summary": "SAS combines model risk management, validation and lifecycle governance for regulated AI.", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": null, "workflow": "Model validation and centralized governance workflows", "evidence": "Model documentation and compliance tracking", "integrations": null, "certifications": null, "pricing_notes": "Covers AI Governance Manager and Viya; SAS lists AI Navigator as coming summer 2026.", "monitoring": "Model performance; LLM bias and hallucinations; prompt and response behavior" }, "sources": [ { "url": "https://www.sas.com/en_us/solutions/ai/governance.html", "title": "SAS AI Governance — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "workflow", "evidence", "pricing_notes", "monitoring" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "secureframe", "name": "Secureframe", "url": "https://secureframe.com/frameworks/iso-42001", "summary": "Compliance automation supports ISO 42001 policies, control tests and risk management.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": null, "iso_42001": "Documented", "nist_ai_rmf": null, "deployment": null, "pricing_model": "Annual packages; custom quote", "inventory": null, "workflow": "Policy acknowledgement and custom control tests", "evidence": "Automated evidence collection and linked risk documents", "integrations": null, "certifications": null, "pricing_notes": "Fundamentals starts at USD 7,500/year; ISO 42001 scope is set in the quote.", "monitoring": null }, "sources": [ { "url": "https://secureframe.com/frameworks/iso-42001", "title": "Secureframe — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "iso_42001", "workflow", "evidence" ] }, { "url": "https://secureframe.com/pricing", "title": "Secureframe packages", "accessed": "2026-11-11", "fields": [ "pricing_model", "pricing_notes" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "securiti", "name": "Securiti AI", "url": "https://securiti.ai/products/data-governance/", "summary": "AI discovery and data mapping support enterprise governance and risk assessments.", "tags": [ "Data & privacy" ], "fields": { "category": "Data & privacy", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "AI risk classification and framework assessments", "evidence": "Data, model and agent provenance tracking", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://securiti.ai/products/data-governance/", "title": "Securiti AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "nist_ai_rmf", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "servicenow", "name": "ServiceNow Super Intelligence Control Tower", "url": "https://www.servicenow.com/products/super-intelligence-control-tower.html", "summary": "Enterprise AI discovery and compliance workflows operate within the ServiceNow platform and CMDB.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": "Custom quote", "inventory": true, "workflow": "Automated, traceable compliance gates", "evidence": "Auditable compliance workflows", "integrations": "ServiceNow CMDB", "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.servicenow.com/products/super-intelligence-control-tower.html", "title": "ServiceNow Super Intelligence Control Tower — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "nist_ai_rmf", "pricing_model", "inventory", "workflow", "evidence", "integrations" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "sprinto", "name": "Sprinto", "url": "https://sprinto.com/iso-42001/choosing-a-platform-for-aims/", "summary": "ISO 42001 compliance workflows support teams building their AI management system.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": null, "iso_42001": "Documented", "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "AI systems inventory, reviews and risk assessments", "evidence": "Evidence collection and in-platform auditor collaboration", "integrations": null, "certifications": null, "pricing_notes": "Foundation includes inventory and reviews; automated and shadow AI discovery are add-ons.", "monitoring": null }, "sources": [ { "url": "https://sprinto.com/iso-42001/choosing-a-platform-for-aims/", "title": "Sprinto — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "iso_42001", "inventory", "workflow", "evidence", "pricing_notes" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "suzan", "name": "Suzan for AI", "url": "https://suzan.ai/ai/", "summary": "A governance cockpit links AI assets, project workflows and organizational risk.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Configurable project workflows and risk action plans", "evidence": "Controls associated with supporting evidence", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://suzan.ai/ai/", "title": "Suzan for AI — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "transcend", "name": "Transcend", "url": "https://transcend.io/platform", "summary": "Data permissions and AI assessments connect enterprise privacy workflows to runtime policies.", "tags": [ "Data & privacy" ], "fields": { "category": "Data & privacy", "eu_ai_act": null, "iso_42001": null, "nist_ai_rmf": null, "deployment": "Self-hosted gateway", "pricing_model": null, "inventory": null, "workflow": "AI assessments and purpose-based data policies", "evidence": "Logged agent, tool, role, data, policy version and outcome", "integrations": null, "certifications": null, "pricing_notes": "Sombra, the data gateway, is self-hosted.", "monitoring": null }, "sources": [ { "url": "https://transcend.io/platform", "title": "Transcend — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "workflow", "pricing_notes", "deployment" ] }, { "url": "https://transcend.io/", "title": "Transcend agent and data controls", "accessed": "2026-11-11", "fields": [ "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "trustarc", "name": "TrustArc AI Governance", "url": "https://trustarc.com/solutions/ai-governance", "summary": "The privacy platform extends to AI: prebuilt templates, scored AI risk assessments and an AI inventory for privacy and compliance teams.", "hq": "US", "tags": [ "Data & privacy" ], "fields": { "category": "Data & privacy", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Prebuilt templates and automated, scored AI risk assessments", "evidence": "Real-time risk scoring, visibility and reporting", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://trustarc.com/solutions/ai-governance", "title": "TrustArc: AI governance", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "trustible", "name": "Trustible", "url": "https://trustible.ai/", "summary": "A governance platform routes AI use cases through risk triage, reviews and monitoring.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Risk-based intake, documentation and approvals", "evidence": "Audit trail generated through governance work", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://trustible.ai/", "title": "Trustible — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "trustworks", "name": "TrustWorks", "url": "https://www.trustworks.io/ai-governance", "summary": "Privacy and AI workflows register systems, classify risk and coordinate control reviews.", "tags": [ "Data & privacy" ], "fields": { "category": "Data & privacy", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Risk classification and conformity assessment workflows", "evidence": "Audit logs and regulatory reporting documents", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.trustworks.io/ai-governance", "title": "TrustWorks — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "truyo", "name": "Truyo", "url": "https://truyo.com/platform/ai-governance/", "summary": "Discovery and assessments build a register of employee and vendor AI use.", "tags": [ "Data & privacy" ], "fields": { "category": "Data & privacy", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Use-case assessments, risk registers and remediation", "evidence": "AI governance reports and transparency notices", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://truyo.com/platform/ai-governance/", "title": "Truyo — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "nist_ai_rmf", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "validmind", "name": "ValidMind", "url": "https://validmind.com/platform/", "summary": "Regulated organizations use model inventory, validation workflows and documentation automation.", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Independent validation workflows and approval controls", "evidence": "Validation reports, audit trails and testing evidence", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://validmind.com/platform/", "title": "ValidMind — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "inventory", "workflow", "evidence" ] }, { "url": "https://docs.validmind.ai/", "title": "ValidMind documentation", "accessed": "2026-11-11", "fields": [ "eu_ai_act" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "vanta", "name": "Vanta ISO 42001", "url": "https://www.vanta.com/products/iso-42001", "summary": "An AIMS workflow brings policies, risk scenarios and audit evidence into a compliance program.", "tags": [ "GRC & AIMS" ], "fields": { "category": "GRC & AIMS", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": null, "pricing_model": "Tiered plans; personalized quote", "inventory": null, "workflow": "AI scoping, risk scenarios and mapped controls", "evidence": "Readiness artifacts, reports and auditor access", "integrations": "Cloud, identity, version control and OpenAI integrations", "certifications": null, "pricing_notes": "Covers the ISO 42001 compliance product. Vanta’s separate agent-governance product is in early access.", "monitoring": null }, "sources": [ { "url": "https://www.vanta.com/products/iso-42001", "title": "Vanta ISO 42001 — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "workflow", "evidence", "integrations", "pricing_notes" ] }, { "url": "https://www.vanta.com/pricing", "title": "Vanta plans and pricing", "accessed": "2026-11-11", "fields": [ "pricing_model" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "verifywise", "name": "VerifyWise", "url": "https://verifywise.ai/", "summary": "A source-available governance platform manages inventories, approvals and compliance evidence.", "tags": [ "AI governance" ], "fields": { "category": "AI governance", "eu_ai_act": "Documented", "iso_42001": "Documented", "nist_ai_rmf": "Documented", "deployment": "Cloud & self-hosted", "pricing_model": "Tiered SaaS plans", "inventory": true, "workflow": "Risk assessments, policies and role-based approvals", "evidence": "Exportable documentation and audit logs", "integrations": null, "certifications": null, "pricing_notes": "Free trial at USD 0/month: one seat, one use case, one framework. Enterprise is SaaS; Enterprise Plus runs on-premises.", "monitoring": null }, "sources": [ { "url": "https://verifywise.ai/", "title": "VerifyWise — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "iso_42001", "nist_ai_rmf", "deployment", "inventory", "workflow", "evidence" ] }, { "url": "https://verifywise.ai/pricing", "title": "VerifyWise plans", "accessed": "2026-11-11", "fields": [ "pricing_model", "pricing_notes" ] } ], "verifiedAt": "2026-11-11", "featured": false }, { "id": "yields", "name": "Yields", "url": "https://www.yields.io/", "summary": "AI governance and model risk software provide configurable oversight for regulated model portfolios.", "tags": [ "Model assurance" ], "fields": { "category": "Model assurance", "eu_ai_act": "Documented", "iso_42001": null, "nist_ai_rmf": null, "deployment": null, "pricing_model": null, "inventory": true, "workflow": "Policy alignment, risk assessments and configurable reviews", "evidence": "Centralized documentation and validation reports", "integrations": null, "certifications": null, "pricing_notes": null, "monitoring": null }, "sources": [ { "url": "https://www.yields.io/", "title": "Yields — product capabilities", "accessed": "2026-11-11", "fields": [ "category", "eu_ai_act", "inventory", "workflow", "evidence" ] } ], "verifiedAt": "2026-11-11", "featured": false } ] }