AI Compliance Vendors

The independent directory of AI compliance vendorsKnow what’s due.
Read the label.

The AI-regulation deadlines that matter, on one line. 86 vendors and 22 audit firms described in one fixed format. Sourced, dated, independent.

AI regulation deadlines

  1. EU AI Act — prohibited practices

  2. EU AI Act — general-purpose AI

  3. Texas TRAIGA in force

  4. EU Art. 50 transparency · California SB 942

  5. Today ·

  6. · 74 days

    Colorado SB 26-189 · California ADMT rules

  7. · 409 days

    EU AI Act high-risk — Annex III

  8. · 653 days

    EU AI Act high-risk — Annex I products

Every date is sourced on its law’s page. Full timeline. Status reviewed 1 Oct 2026. Not legal advice.

Deadline Facts

Colorado SB 26-189 (replaces SB 24-205)

Takes effect

74 days

Applies to Developers and deployers of automated decision-making technology used in consequential decisions about consumers

Consumer notice
Deployers
Adverse-outcome explanation (30 days)
Deployers
Data correction + human review
Deployers
Documentation for deployers
Developers
Records kept 3 years
Both

Enforced by Colorado Attorney General · 60-day cure period until 1 Jan 2030

Status reviewed 1 Oct 2026

Deadline Facts

California CPPA rules — ADMT, risk assessments, audits

ADMT rules apply

74 days

Applies to Businesses subject to the CCPA that use automated decisionmaking technology to make significant decisions about consumers

Regulations in effect
1 Jan 2026
Risk-assessment duties begin
1 Jan 2026
ADMT rules, existing uses
1 Jan 2027
First risk-assessment submissions
1 Apr 2028
First cyber audits (revenue over $100M)
1 Apr 2028

Enforced by California Privacy Protection Agency

Status reviewed 27 Sep 2026

Deadline Facts

EU AI Act — high-risk systems (Annex III)

Applies from

409 days

Applies to Providers and deployers of high-risk AI in Annex III areas such as employment, credit scoring and education

Risk management
Art. 9
Data governance
Art. 10
Technical documentation
Art. 11
Human oversight
Art. 14
Deployer obligations
Art. 26

Enforced by National authorities · fines up to €15M or 3% of worldwide turnover (Art. 99(4))

Status reviewed 27 Sep 2026

Every vendor. Same label.

Coverage, pricing, headquarters and the day we last checked, for all 86 vendors, in one fixed format. Nothing on a label is for sale.

Shown: the most recently checked profiles with framework coverage on file. Sources are cited on every profile.

Compliance Facts

Vendor Secureframe

San Francisco, United States
Founded 2020 · 201-500 staff

Framework coverageLevel

ISO/IEC 42001
Comprehensive
NIST AI RMF
Comprehensive
HIPAA
Comprehensive
EU AI Act
Partial

+ 4 more on the profile

Pricing Three plans: Fundamentals (starting at $7,500/year, one compliance framework), Complete (quote only; adds advanced versions of third-party risk, risk management, user access reviews, Trust Center and questionnaire automation, plus SSO/SCIM and custom integrations) and Defense (quote only; CMMC tooling such as SSP and POA&M). Additional workspaces are an add-on.

Last checked . Sources on the profile.

Compliance Facts

Vendor Nightfall AI

San Francisco, United States
Founded 2018

Framework coverageLevel

HIPAA
Partial
SOC 2
Certified
PCI DSS
Partial
ISO 27001
Adjacent

Pricing Two packages, priced per user per year: Foundation Edition (DLP across SaaS, email, AI apps and endpoints, with real-time blocking) and Premier Edition (adds AI agent security: hooks for Cursor, Claude Code and VS Code, MCP discovery, Claude Cowork and Claude Enterprise monitoring, SIEM export), offered as Tier 1 (up to 3 apps) or Tier 2 (all supported apps). The pricing page shows no amounts; it says final pricing depends on user count and data volume and offers a free 7-day proof of value. Each user license covers two endpoint devices. Data Discovery and Classification is an add-on with 150 GB included and paid 1 TB, 3 TB, 5 TB and 20 TB packs.

Last checked . Sources on the profile.

Compliance Facts

Vendor Noma Security

New York, United States
Founded 2023

Framework coverageLevel

EU AI Act
Partial
NIST AI RMF
Partial
ISO/IEC 42001
Partial

Pricing No prices on noma.security. AWS Marketplace lists the Noma Security Platform at $200,000 for a 12-month contract but doesn't say how many units that covers.

Last checked . Sources on the profile.

Vendors mapped by framework

86 vendors · 22 audit firms · 17 frameworks · 98 comparisons

Free vendor matchmaking

Not sure which vendor fits?

Answer a few questions and see which vendors fit your frameworks, industry, and size. Free, no sign-up, nothing shared with vendors.

No sign-up. Independent directory — we do not sell software ourselves.

Every claim sourced

Every material claim on a profile links to a public source. If we can’t cite a fact, the field stays blank rather than guessed.

Dates carry a review date

Each law’s status and deadlines show when we last checked them and the sources behind them. An automatic weekly check flags anything overdue.

Paid placement in red

Vendors can pay for a Featured slot in directory listings. It is always marked in red and never changes a label, a best-of ranking or our commentary. Methodology

Selling an AI compliance product?

Every listing is free. Claim your profile to correct facts and supply citations. Optional paid Featured slots are marked in red and never influence editorial best-of rankings.