AI Compliance List

Secureframe

Compliance automation supports ISO 42001 policies, control tests and risk management.

GRC & AIMS

Verified

Visit Secureframe Compare with others Discuss shortlist

Every value links the vendor page it came from. “Documented” means the vendor describes support for that framework. Evidence rules.

Facts

Source per value
Platform type Platform type by the product’s main focus; many products span several.
GRC & AIMS 1
EU AI Act Documented: the vendor’s product pages describe templates, control mappings, assessments or evidence for the EU AI Act.
Not published
ISO 42001 Documented: the vendor’s product pages describe templates, control mappings, assessments or evidence for ISO/IEC 42001.
Documented 1
NIST AI RMF Documented: the vendor’s product pages describe templates, control mappings, assessments or evidence for the NIST AI RMF.
Not published
Deployment Hosting options the vendor publishes for the product.
Not published
Pricing model Published billing basis or custom-quote offer. Amounts and plan scope are in the pricing notes.
Annual packages; custom quote 2
AI inventory The product keeps a register of AI systems, agents, use cases or models.
Not published
Governance workflow A sourced description of review, assessment, policy or validation functionality.
Policy acknowledgement and custom control tests 1
Evidence output Documents, audit records, reports or traceability the product produces or maintains.
Automated evidence collection and linked risk documents 1
Integrations Named supported integrations or interfaces, as stated on the cited product or documentation page.
Not published
Vendor assurance Certificates and audit reports the vendor publishes for itself. SOC 2 is an audit report; ISO standards are certifications.
Not published
Scope & pricing notes Plan scope, availability and billing details from the vendor’s pricing and product pages.
Fundamentals starts at USD 7,500/year; ISO 42001 scope is set in the quote. 2
Technical monitoring Technical monitoring of models and AI workloads, separate from compliance task tracking.
Not published

Sources

  1. Secureframe — product capabilities accessed 2026-11-11
  2. Secureframe packages accessed 2026-11-11
Open comparison

Matched by platform type, then by shared frameworks.

  • Compyl

    A GRC platform supports AI management controls alongside enterprise compliance work.

  • Drata

    ISO 42001 workflows link AI-specific risks to control owners and evidence.

  • Hyperproof

    A GRC platform with out-of-the-box ISO 42001 and NIST AI RMF templates, control cross-walking and automated evidence collection.

  • ISMS.online

    An AI management system workspace integrates policies, risks and internal audits.

Discuss your shortlist

Building a shortlist? Email hello@aicompliancelist.com with your AI systems, frameworks, hosting needs and timeline, and get platforms matched to them.