# AI Compliance Vendors > Independent directory of AI compliance, governance, audit, and risk vendors. Every fact traceable to a public source. Verified quarterly. ## Core pages - [Homepage](https://aicompliancevendors.com/): Start here. - [All vendors](https://aicompliancevendors.com/vendors): Full directory of vendors. - [Best-of collections](https://aicompliancevendors.com/best): Ranked, independently verified vendor shortlists by use case. - [Alternatives directory](https://aicompliancevendors.com/alternatives): Competitor and alternative comparisons for popular vendors. - [Frameworks index](https://aicompliancevendors.com/frameworks): Regulations and standards we cover. - [Auditors](https://aicompliancevendors.com/auditors): Third-party audit firms. - [Guides](https://aicompliancevendors.com/guides): Editorial playbooks. - [Cost calculator](https://aicompliancevendors.com/cost): Source-cited cost ranges for EU AI Act, NIST AI RMF, and ISO/IEC 42001. No email gate. - [Methodology](https://aicompliancevendors.com/methodology): How we verify and rank. - [About](https://aicompliancevendors.com/about): Mission and independence. ## Vendors - [2021.AI](https://aicompliancevendors.com/vendors/2021-ai): Enterprise AI platform with built-in governance - [Aporia](https://aicompliancevendors.com/vendors/aporia): Deliver secure and reliable AI - [Arize AI](https://aicompliancevendors.com/vendors/arize-ai): Ship Agents that Work — AI & Agent Engineering Platform for development, observability, and evaluation. - [Arthur](https://aicompliancevendors.com/vendors/arthur): Continuous evaluation platform for ML, GenAI, and Agentic AI - [BABL AI](https://aicompliancevendors.com/vendors/babl-ai): Pioneering Responsible AI Solutions Since 2018. - [BigID](https://aicompliancevendors.com/vendors/bigid): Enterprise Data Security Platform for DSPM & AI — enterprise-scale data discovery, security, and compliance. - [Braintrust](https://aicompliancevendors.com/vendors/braintrust-ai): The AI observability platform for building quality AI products - [CalypsoAI](https://aicompliancevendors.com/vendors/calypsoai): Adaptive AI security platform securing models and applications at inference layer - [Citrusˣ](https://aicompliancevendors.com/vendors/citrusx): Validate and Mitigate AI Risk at Scale - [Collibra AI Governance](https://aicompliancevendors.com/vendors/collibra-ai-governance): AI governance platform for compliant, trusted AI - [Cranium](https://aicompliancevendors.com/vendors/cranium): AI SECURITY OPERATIONALIZED. - [Credo AI](https://aicompliancevendors.com/vendors/credo-ai): Govern AI Everywhere. - [DataRobot](https://aicompliancevendors.com/vendors/datarobot): Meet the only agent workforce platform built for outcomes — not endless pilots. - [Dataiku Govern](https://aicompliancevendors.com/vendors/dataiku-govern): Track and manage data and AI initiatives across the organization in a single place. - [Drata](https://aicompliancevendors.com/vendors/drata): Modern GRC, Compliance & Trust Automation - [Enzai](https://aicompliancevendors.com/vendors/enzai): AI Governance & Enablement Technology. - [FairNow](https://aicompliancevendors.com/vendors/fairnow): AI governance platform simplifying risk and compliance for AI systems - [Fairly AI](https://aicompliancevendors.com/vendors/fairly-ai): AI GRC in a box for regulated industries. - [Fiddler AI](https://aicompliancevendors.com/vendors/fiddler-ai): AI observability and security platform for enterprise ML and LLM applications - [Galileo](https://aicompliancevendors.com/vendors/galileo-ai): Don't just monitor AI failures. Stop them. - [Giskard](https://aicompliancevendors.com/vendors/giskard-ai): Test your AI agents to catch issues before they happen in production - [HiddenLayer](https://aicompliancevendors.com/vendors/hiddenlayer): The most comprehensive security platform for AI - [Holistic AI](https://aicompliancevendors.com/vendors/holistic-ai): The end-to-end AI governance platform to discover, assess, mitigate, monitor and govern risk across every AI agent, model, and application. - [IBM watsonx.governance](https://aicompliancevendors.com/vendors/ibm-watsonx-governance): Direct, manage and monitor your AI with a single solution that speeds up responsible, transparent and explainable AI. - [Knostic](https://aicompliancevendors.com/vendors/knostic): Need-to-know access controls for LLMs in the enterprise - [Lakera](https://aicompliancevendors.com/vendors/lakera): The leading security platform to secure your AI future. - [LangSmith](https://aicompliancevendors.com/vendors/langsmith): AI Agent & LLM Observability Platform - [Langfuse](https://aicompliancevendors.com/vendors/langfuse): Open Source LLM Engineering Platform - [Lasso Security](https://aicompliancevendors.com/vendors/lasso-security): Secure AI Adoption at Enterprise Scale - [LatticeFlow AI](https://aicompliancevendors.com/vendors/latticeflow-ai): A single platform to discover, evaluate and govern risk to secure your AI future. - [Luminos.Law (ZwillGen AI Division)](https://aicompliancevendors.com/vendors/luminos-law): AI Division providing red team testing, audits, and legal guidance for AI systems. - [Mind Foundry](https://aicompliancevendors.com/vendors/mind-foundry): Machine-speed decision support. Designed for deployment. - [ModelOp](https://aicompliancevendors.com/vendors/modelop): Enterprise AI lifecycle management and governance platform - [Modulos AI Governance](https://aicompliancevendors.com/vendors/modulos-ai): AI Governance Platform for Enterprises - [Monitaur](https://aicompliancevendors.com/vendors/monitaur): Keeping AI honest is a full-time job. Ours. - [Naaia](https://aicompliancevendors.com/vendors/naaia): Europe's AI Management System for AI Act compliance - [ORCAA](https://aicompliancevendors.com/vendors/orcaa): How do you know your ai is working well for everyone? - [OneTrust AI Governance](https://aicompliancevendors.com/vendors/onetrust-ai-governance): AI governance software that centralizes risk, automates compliance, and enforces controls across the AI lifecycle - [Patronus AI](https://aicompliancevendors.com/vendors/patronus-ai): Industry-first automated evaluation and security platform for LLMs. - [Pillar Security](https://aicompliancevendors.com/vendors/pillar-security): One platform to discover, govern, and secure every AI agent or workflow across your organization. - [Prompt Security](https://aicompliancevendors.com/vendors/prompt-security): Prompt Security is the AI security company helping you manage GenAI risks. - [Promptfoo](https://aicompliancevendors.com/vendors/promptfoo): Build Secure AI Applications - [Protect AI](https://aicompliancevendors.com/vendors/protect-ai): The Platform for AI Security - [Robust Intelligence](https://aicompliancevendors.com/vendors/robust-intelligence): - [Saidot](https://aicompliancevendors.com/vendors/saidot): EU-native SaaS platform for AI governance — easy to start, efficient to maintain. - [Scrut Automation](https://aicompliancevendors.com/vendors/scrut-automation): Security-First GRC for Modern Risk & Compliance - [Securiti Data Command Center](https://aicompliancevendors.com/vendors/securiti-ai): Command Your Data AI Everywhere — unified intelligence and controls across hybrid multicloud environments. - [ServiceNow AI Control Tower](https://aicompliancevendors.com/vendors/servicenow-ai-governance): Take control of any AI from a central intelligent hub — connect your AI strategy, governance, and management across the enterprise. - [TrojAI](https://aicompliancevendors.com/vendors/trojai): Deploy AI Agents with Confidence. - [TrustArc](https://aicompliancevendors.com/vendors/trustarc): AI-powered privacy platform for compliance and governance - [Trustible](https://aicompliancevendors.com/vendors/trustible): Purpose-built AI governance platform for assessing, approving, and scaling AI - [ValidMind](https://aicompliancevendors.com/vendors/validmind): AI governance platform for regulated financial services model risk management. - [Vanta](https://aicompliancevendors.com/vendors/vanta): The AI-powered Trust Management Platform that automates compliance, manages risk, and proves trust continuously. - [Weights & Biases Weave](https://aicompliancevendors.com/vendors/wb-weave): Deliver AI with confidence. - [WhyLabs](https://aicompliancevendors.com/vendors/whylabs): The AI Observability Platform ## Frameworks - [Colorado AI Act](https://aicompliancevendors.com/frameworks/colorado-ai-act): Colorado SB 24-205, the Colorado Artificial Intelligence Act, was signed into law in May 2024 and takes effect on February 1, 2026. It is th - [EU AI Act](https://aicompliancevendors.com/frameworks/eu-ai-act): The EU AI Act (Regulation (EU) 2024/1689) is the world's first comprehensive horizontal regulation of artificial intelligence systems. It en - [FedRAMP](https://aicompliancevendors.com/frameworks/fedramp): FedRAMP is the U.S. federal program that standardizes security assessment, authorization, and continuous monitoring for cloud services used - [GDPR Art. 22](https://aicompliancevendors.com/frameworks/gdpr-article-22): Article 22 of the EU General Data Protection Regulation gives data subjects the right not to be subject to a decision based solely on automa - [HIPAA](https://aicompliancevendors.com/frameworks/hipaa): HIPAA governs the privacy and security of Protected Health Information (PHI) in the United States. AI vendors operating in healthcare must m - [ISO 27001](https://aicompliancevendors.com/frameworks/iso-27001): ISO/IEC 27001 is the international standard for information security management systems (ISMS). It complements ISO/IEC 42001 (AI management - [ISO/IEC 42001](https://aicompliancevendors.com/frameworks/iso-iec-42001): ISO/IEC 42001:2023 is the first international management-system standard for artificial intelligence, published in December 2023 jointly by - [NIST AI RMF](https://aicompliancevendors.com/frameworks/nist-ai-rmf): The NIST AI Risk Management Framework (AI RMF 1.0) was published by the U.S. National Institute of Standards and Technology in January 2023, - [NYC LL 144](https://aicompliancevendors.com/frameworks/nyc-local-law-144): New York City Local Law 144 of 2021 prohibits employers and employment agencies from using an automated employment decision tool (AEDT) to s - [PCI DSS](https://aicompliancevendors.com/frameworks/pci-dss): PCI DSS governs the handling of payment card data. AI vendors serving fintech, retail, and payment processors often need to demonstrate PCI - [SEC AI Disclosure](https://aicompliancevendors.com/frameworks/sec-ai-disclosure): The SEC has brought enforcement actions and issued guidance requiring public companies to accurately disclose their use of AI in securities - [SOC 2](https://aicompliancevendors.com/frameworks/soc2): SOC 2 is an AICPA auditing standard for service organizations, evaluating controls relevant to security, availability, processing integrity, - [UK AI Framework](https://aicompliancevendors.com/frameworks/uk-ai-governance): The UK's pro-innovation, context-specific approach to AI regulation relies on existing regulators (ICO, FCA, CMA, MHRA, Ofcom) applying five ## Best-of collections - [8 Best AI Risk Management Software (2026): Independent Ranking](https://aicompliancevendors.com/best/ai-risk-management-software): 1. Credo AI 2. IBM watsonx.governance 3. Fiddler AI plus 5 more — independent ranking covering EU AI Act, NIST AI RMF, ISO 42001, SR 11-7. - [AI Audit Firms: Independent Directory 2026](https://aicompliancevendors.com/best/ai-audit-firms): Independent directory of 4 AI audit firms. Covers specializations, methodologies, regulatory coverage, and buyer guidance. Featured slots labeled. - [AI Bias Audit Firms 2026: Independent Directory](https://aicompliancevendors.com/best/ai-bias-audit-firms): Independent directory of 4 firms offering AI bias and fairness audits. NYC Local Law 144, EU AI Act fairness obligations, Colorado AI Act. Methodology details, - [Best AI Bias Detection Tools 2026](https://aicompliancevendors.com/best/ai-bias-detection-tools): Independent ranking of 5 AI bias detection tools. Verified feature data, regulatory alignment (EU AI Act, NYC LL-144), and pricing. Featured slots labeled. - [Best AI Governance Platforms 2026: Ranked & Compared](https://aicompliancevendors.com/best/ai-governance-platforms): Independent ranking of 8 AI governance platforms. Verified feature data, regulatory alignment, pricing. Featured slots labeled. - [Best AI Model Risk Management Software 2026: Ranked for Banks and Insurers](https://aicompliancevendors.com/best/ai-model-risk-management-software): 6 AI model risk management platforms ranked for SR 11-7, OSFI E-23, SS1/23, and EU AI Act coverage. Independent — verified product data, no affiliate links. - [Best AI Red Team Tools 2026](https://aicompliancevendors.com/best/ai-red-team-tools): Independent ranking of 5 AI red team and LLM security testing tools. Verified features, vulnerability coverage, and CI/CD integration. Featured slots labeled. - [Best Automated Employment Decision Tools 2026: NYC LL 144 Compliance Software](https://aicompliancevendors.com/best/automated-employment-decision-tools): Best automated employment decision tools ranked for NYC Local Law 144 compliance. Covers bias auditors, governance platforms, and multi-state AI laws. - [Best Colorado AI Act Compliance Tools for Financial Services 2026](https://aicompliancevendors.com/best/colorado-ai-act-vendors-financial-services): Ranked: 6 Colorado AI Act compliance tools for financial services. SB 24-205 impact assessments, deployer obligations, bias testing. June 2026 deadline. - [Best EU AI Act Compliance Tools 2026: Ranked for the August 2 Deadline](https://aicompliancevendors.com/best/eu-ai-act-compliance-tools): Independent ranking of EU AI Act compliance software ahead of the August 2, 2026 high-risk system deadline. Verified feature data, framework coverage, pricing t - [Best ISO 42001 Certification Software: Compared & Ranked 2026](https://aicompliancevendors.com/best/iso-42001-software): 6 ISO 42001 certification platforms compared on control coverage, pricing, and audit-readiness. Independent ranking — no affiliate links. - [Best LLM Observability Platforms 2026](https://aicompliancevendors.com/best/llm-observability-platforms): Independent ranking of 7 LLM observability platforms. Verified feature data, pricing, integration breadth. Featured slots labeled. - [Best NIST AI RMF Tools 2026: Implementation Guide](https://aicompliancevendors.com/best/nist-ai-rmf-tools): Independent ranking of 6 NIST AI RMF implementation tools. Verified coverage of Govern, Map, Measure, Manage functions. Featured slots labeled. - [Best Texas AI Act (TRAIGA) Compliance Tools 2026](https://aicompliancevendors.com/best/texas-ai-act-compliance-tools): Six AI tools ranked for Texas TRAIGA (HB 149). Verified NIST AI RMF safe harbor, intent-based documentation, biometric controls, and multi-state coverage. ## Alternatives - [Alternatives to credo-ai](https://aicompliancevendors.com/alternatives/credo-ai): Independent comparison of 5 Credo AI alternatives for AI governance. Verified feature differences, pricing, and use-case fit. Featured slots labeled. - [Alternatives to holistic-ai](https://aicompliancevendors.com/alternatives/holistic-ai): Independent comparison of 5 Holistic AI alternatives. Verified feature differences, pricing, and use-case guidance. Featured slots labeled. - [Alternatives to fiddler-ai](https://aicompliancevendors.com/alternatives/fiddler-ai): Independent comparison of 4 Fiddler AI alternatives for LLM observability. Verified feature data, pricing, and use-case guidance. Featured slots labeled. - [Alternatives to arize-ai](https://aicompliancevendors.com/alternatives/arize-ai): Independent comparison of 5 Arize AI alternatives for LLM observability. Verified feature differences, pricing, and use-case guidance. Featured slots labeled. - [Alternatives to langfuse](https://aicompliancevendors.com/alternatives/langfuse): Independent comparison of 4 Langfuse alternatives for LLM observability. Verified feature data, pricing, and deployment flexibility. Featured slots labeled. - [Alternatives to ibm-watsonx-governance](https://aicompliancevendors.com/alternatives/ibm-watsonx-governance): Independent comparison of 5 IBM watsonx.governance alternatives for AI governance. Verified feature differences, pricing, and use-case fit. Featured slots label ## Guides - [AI Bill of Materials (AI-BOM): Standards and Tooling in 2026](https://aicompliancevendors.com/guides/ai-bom-tools): CycloneDX ML-BOM, SPDX 3.0 AI Profile, and the current state of AI-BOM tooling. What an AI-BOM should contain, why one purpose-built vendor - [AI Compliance Vendor Independence: Avoiding Lock-In (2026)](https://aicompliancevendors.com/guides/ai-vendor-independence): How to evaluate AI compliance vendors for data portability, contract exit terms, and architectural lock-in risk. A ten-question diligence ru - [AI Compliance Vendors: A Buyer’s Map of the 2026 Market](https://aicompliancevendors.com/guides/ai-compliance-vendors): A source-cited guide to the AI compliance vendor market in 2026 — categories, frameworks they cover, how they’re priced, and how to shortlis - [EU AI Act FRIA Deep Dive: Article 27 Compliance for Deployers (2026)](https://aicompliancevendors.com/guides/eu-ai-act-fria-deep-dive): A complete deployer-side methodology for the EU AI Act Article 27 Fundamental Rights Impact Assessment: who must conduct one, the six mandat - [AI Compliance Software RFP Template (2026): The Complete Procurement Toolkit](https://aicompliancevendors.com/guides/ai-compliance-rfp-template): A 60-question AI governance RFP template with scoring rubric, contract clauses, and a 12-week procurement timeline — covering EU AI Act, NIS - [AI Governance Tools for Startups: A Pragmatic 2026 Buyer's Guide](https://aicompliancevendors.com/guides/ai-governance-tools-for-startups): A pragmatic buyer's guide for early-stage startups: free and open-source AI governance tools (Promptfoo, Giskard, Langfuse, NIST AI RMF Play - [AI Compliance Vendor Due Diligence: The Complete Procurement Guide](https://aicompliancevendors.com/guides/ai-compliance-vendor-due-diligence): A procurement-grade due diligence framework for AI compliance software: financial-stability checks, security questionnaires (SIG, CAIQ), reg - [AI Impact Assessment Template: The Complete How-To Guide (2026)](https://aicompliancevendors.com/guides/ai-impact-assessment-template): A practical template and step-by-step methodology for AI Impact Assessments aligned with the EU AI Act (Article 27 FRIA), Colorado AI Act §6 - [AI Compliance Software Procurement: The 2026 Enterprise Buyer's Guide](https://aicompliancevendors.com/guides/ai-compliance-software-procurement): A buyer-side procurement playbook for AI compliance platforms: needs assessment, RFP construction, evaluation rubric, total cost of ownershi - [NIST AI RMF Implementation: From Govern to Manage in 2026](https://aicompliancevendors.com/guides/nist-ai-rmf-implementation-guide): Step-by-step guide to implementing NIST AI RMF 1.0: operational breakdowns of GOVERN, MAP, MEASURE, and MANAGE functions, required artifacts - [The AI Governance Platform Buyer's Guide (2026 Edition)](https://aicompliancevendors.com/guides/ai-governance-platform-buyers-guide-2026): Category-defining guide to AI governance platforms: what the category actually means vs adjacent tools, an 8-dimension evaluation rubric, 10 - [ISO/IEC 42001 Certification: The Complete Path to AIMS in 2026](https://aicompliancevendors.com/guides/iso-iec-42001-certification-path): How to achieve ISO/IEC 42001:2023 certification: clause-by-clause walkthrough of all 10 clauses and 38 Annex A controls, Stage 1 and Stage 2 - [EU AI Act Compliance: The Complete 2026 Buyer's Guide](https://aicompliancevendors.com/guides/eu-ai-act-compliance-complete-guide-2026): Definitive 2026 guide to EU AI Act compliance: every deadline from the August 2026 full application date, all obligation tiers, risk categor - [How to Select an AI Governance Vendor for the EU AI Act (2026)](https://aicompliancevendors.com/guides/eu-ai-act-vendor-selection-guide-2026): A senior-practitioner checklist for evaluating AI governance vendors against the 11 core obligations of the EU AI Act, including what to ask ## FAQs - [What is ISO/IEC 42001?](https://aicompliancevendors.com/faqs/what-is-iso-42001): The first international management-system standard for AI, published December 2023 — certifiable, auditable, and already adopted by major AI vendors. - [EU AI Act fines and penalties](https://aicompliancevendors.com/faqs/eu-ai-act-fines): Non-compliance with the EU AI Act can cost up to EUR 35 million or 7 percent of global annual turnover — higher than GDPR's 4 percent cap. - [NIST AI RMF vs ISO/IEC 42001](https://aicompliancevendors.com/faqs/nist-ai-rmf-vs-iso-42001): Two of the most-referenced AI governance frameworks — one is a voluntary US framework, the other an international standard that can be certified. Most mature pr - [How much do AI governance platforms cost?](https://aicompliancevendors.com/faqs/ai-governance-platform-pricing): Most AI governance platforms sell annual contracts in the low-to-mid five figures for mid-market and six figures for enterprise. Here is what we can verify from - [Who needs to comply with the EU AI Act?](https://aicompliancevendors.com/faqs/who-needs-to-comply-with-eu-ai-act): If your AI system lands in the EU market or its output is used in the EU, you are in scope — regardless of where your company is headquartered. - [How do you rank AI compliance vendors?](https://aicompliancevendors.com/faqs/how-we-rank-vendors): Editorial best-of rankings, head-to-head comparison verdicts, and written commentary reflect editorial judgment based on public evidence only and cannot be boug - [What is an AI governance platform?](https://aicompliancevendors.com/faqs/what-is-an-ai-governance-platform): Software that inventories every AI system at a company, assesses its risk, enforces internal policy, and produces the evidence auditors and regulators ask for. - [When does the Colorado AI Act take effect?](https://aicompliancevendors.com/faqs/colorado-ai-act-deadline): Colorado SB 24-205 applies 30 June 2026 (delayed from 1 February 2026 by SB 25B-004) and imposes duties on both developers and deployers of high-risk AI used fo - [GDPR Article 22: automated decision-making explained](https://aicompliancevendors.com/faqs/gdpr-article-22-explained): Article 22 of the GDPR gives individuals the right not to be subject to a decision based solely on automated processing that produces legal or similarly signifi - [NYC Local Law 144 bias audit: what employers must do](https://aicompliancevendors.com/faqs/nyc-local-law-144-bias-audit): NYC employers using AEDTs must commission an independent bias audit each year, post a public summary, and notify candidates — enforced by DCWP since 5 July 2023 - [EU AI Act prohibited practices (Article 5)](https://aicompliancevendors.com/faqs/eu-ai-act-prohibited-practices): Eight categories of AI practice are outright banned across the EU under Article 5 of the AI Act — enforced from 2 February 2025, with the highest fine tier (EUR - [SOC 2 vs ISO/IEC 42001: which do AI vendors need?](https://aicompliancevendors.com/faqs/soc-2-vs-iso-42001): SOC 2 and ISO/IEC 42001 are not substitutes — one attests to information security and operational trust, the other to AI-specific governance. Mature AI vendors - [EU AI Act high-risk AI systems: scope and obligations](https://aicompliancevendors.com/faqs/eu-ai-act-high-risk-systems): High-risk AI systems under the EU AI Act face the heaviest obligations — risk management, data governance, technical documentation, human oversight, conformity - [How AI Compliance Vendors stays independent](https://aicompliancevendors.com/faqs/ai-vendor-independence-policy): Editorial best-of rankings and comparison verdicts are not for sale. Vendors can pay only for a clearly labeled Featured slot in directory listings. - [What is SEC AI Disclosure?](https://aicompliancevendors.com/faqs/what-is-sec-ai-disclosure): The SEC has brought enforcement actions and issued guidance requiring public companies to accurately disclose their use of AI in securities filings, avoid "AI w - [What is HIPAA?](https://aicompliancevendors.com/faqs/what-is-hipaa): HIPAA governs the privacy and security of Protected Health Information (PHI) in the United States. AI vendors operating in healthcare must meet HIPAA Security R - [What is UK AI Framework?](https://aicompliancevendors.com/faqs/what-is-uk-ai-governance): The UK's pro-innovation, context-specific approach to AI regulation relies on existing regulators (ICO, FCA, CMA, MHRA, Ofcom) applying five cross-sectoral prin - [What is SOC 2?](https://aicompliancevendors.com/faqs/what-is-soc2): SOC 2 is an AICPA auditing standard for service organizations, evaluating controls relevant to security, availability, processing integrity, confidentiality, an - [What is NYC LL 144?](https://aicompliancevendors.com/faqs/what-is-nyc-local-law-144): New York City Local Law 144 of 2021 prohibits employers and employment agencies from using an automated employment decision tool (AEDT) to screen a candidate or - [What is ISO/IEC 42001?](https://aicompliancevendors.com/faqs/what-is-iso-iec-42001): ISO/IEC 42001:2023 is the first international management-system standard for artificial intelligence, published in December 2023 jointly by ISO and IEC. It spec - [What is ISO 27001?](https://aicompliancevendors.com/faqs/what-is-iso-27001): ISO/IEC 27001 is the international standard for information security management systems (ISMS). It complements ISO/IEC 42001 (AI management systems) and is ofte - [What is PCI DSS?](https://aicompliancevendors.com/faqs/what-is-pci-dss): PCI DSS governs the handling of payment card data. AI vendors serving fintech, retail, and payment processors often need to demonstrate PCI DSS alignment when t - [What is FedRAMP?](https://aicompliancevendors.com/faqs/what-is-fedramp): FedRAMP is the U.S. federal program that standardizes security assessment, authorization, and continuous monitoring for cloud services used by federal agencies. - [What is EU AI Act?](https://aicompliancevendors.com/faqs/what-is-eu-ai-act): The EU AI Act (Regulation (EU) 2024/1689) is the world's first comprehensive horizontal regulation of artificial intelligence systems. It entered into force on - [What is NIST AI RMF?](https://aicompliancevendors.com/faqs/what-is-nist-ai-rmf): The NIST AI Risk Management Framework (AI RMF 1.0) was published by the U.S. National Institute of Standards and Technology in January 2023, with a Generative A - [What is GDPR Art. 22?](https://aicompliancevendors.com/faqs/what-is-gdpr-article-22): Article 22 of the EU General Data Protection Regulation gives data subjects the right not to be subject to a decision based solely on automated processing — inc - [What is Colorado AI Act?](https://aicompliancevendors.com/faqs/what-is-colorado-ai-act): Colorado SB 24-205, the Colorado Artificial Intelligence Act, was signed into law in May 2024 and takes effect on February 1, 2026. It is the first comprehensiv - [How to evaluate 2021.AI](https://aicompliancevendors.com/faqs/how-to-evaluate-2021-ai): Enterprise AI platform with built-in governance - [How to evaluate Aporia](https://aicompliancevendors.com/faqs/how-to-evaluate-aporia): Deliver secure and reliable AI - [How to evaluate Arize AI](https://aicompliancevendors.com/faqs/how-to-evaluate-arize-ai): Ship Agents that Work — AI & Agent Engineering Platform for development, observability, and evaluation. - [How to evaluate Arthur](https://aicompliancevendors.com/faqs/how-to-evaluate-arthur): Continuous evaluation platform for ML, GenAI, and Agentic AI - [How to evaluate BABL AI](https://aicompliancevendors.com/faqs/how-to-evaluate-babl-ai): Pioneering Responsible AI Solutions Since 2018. - [How to evaluate BigID](https://aicompliancevendors.com/faqs/how-to-evaluate-bigid): Enterprise Data Security Platform for DSPM & AI — enterprise-scale data discovery, security, and compliance. - [How to evaluate Braintrust](https://aicompliancevendors.com/faqs/how-to-evaluate-braintrust-ai): The AI observability platform for building quality AI products - [How to evaluate CalypsoAI](https://aicompliancevendors.com/faqs/how-to-evaluate-calypsoai): Adaptive AI security platform securing models and applications at inference layer - [How to evaluate Citrusˣ](https://aicompliancevendors.com/faqs/how-to-evaluate-citrusx): Validate and Mitigate AI Risk at Scale - [How to evaluate Collibra AI Governance](https://aicompliancevendors.com/faqs/how-to-evaluate-collibra-ai-governance): AI governance platform for compliant, trusted AI - [How to evaluate Cranium](https://aicompliancevendors.com/faqs/how-to-evaluate-cranium): AI SECURITY OPERATIONALIZED. - [How to evaluate Credo AI](https://aicompliancevendors.com/faqs/how-to-evaluate-credo-ai): Govern AI Everywhere. - [How to evaluate DataRobot](https://aicompliancevendors.com/faqs/how-to-evaluate-datarobot): Meet the only agent workforce platform built for outcomes — not endless pilots. - [How to evaluate Dataiku Govern](https://aicompliancevendors.com/faqs/how-to-evaluate-dataiku-govern): Track and manage data and AI initiatives across the organization in a single place. - [How to evaluate Drata](https://aicompliancevendors.com/faqs/how-to-evaluate-drata): Modern GRC, Compliance & Trust Automation - [How to evaluate Enzai](https://aicompliancevendors.com/faqs/how-to-evaluate-enzai): AI Governance & Enablement Technology. - [How to evaluate FairNow](https://aicompliancevendors.com/faqs/how-to-evaluate-fairnow): AI governance platform simplifying risk and compliance for AI systems - [How to evaluate Fairly AI](https://aicompliancevendors.com/faqs/how-to-evaluate-fairly-ai): AI GRC in a box for regulated industries. - [How to evaluate Fiddler AI](https://aicompliancevendors.com/faqs/how-to-evaluate-fiddler-ai): AI observability and security platform for enterprise ML and LLM applications - [How to evaluate Galileo](https://aicompliancevendors.com/faqs/how-to-evaluate-galileo-ai): Don't just monitor AI failures. Stop them. - [How to evaluate Giskard](https://aicompliancevendors.com/faqs/how-to-evaluate-giskard-ai): Test your AI agents to catch issues before they happen in production - [How to evaluate HiddenLayer](https://aicompliancevendors.com/faqs/how-to-evaluate-hiddenlayer): The most comprehensive security platform for AI - [How to evaluate Holistic AI](https://aicompliancevendors.com/faqs/how-to-evaluate-holistic-ai): The end-to-end AI governance platform to discover, assess, mitigate, monitor and govern risk across every AI agent, model, and application. - [How to evaluate IBM watsonx.governance](https://aicompliancevendors.com/faqs/how-to-evaluate-ibm-watsonx-governance): Direct, manage and monitor your AI with a single solution that speeds up responsible, transparent and explainable AI. - [How to evaluate Knostic](https://aicompliancevendors.com/faqs/how-to-evaluate-knostic): Need-to-know access controls for LLMs in the enterprise - [How to evaluate Lakera](https://aicompliancevendors.com/faqs/how-to-evaluate-lakera): The leading security platform to secure your AI future. - [How to evaluate LangSmith](https://aicompliancevendors.com/faqs/how-to-evaluate-langsmith): AI Agent & LLM Observability Platform - [How to evaluate Langfuse](https://aicompliancevendors.com/faqs/how-to-evaluate-langfuse): Open Source LLM Engineering Platform - [How to evaluate Lasso Security](https://aicompliancevendors.com/faqs/how-to-evaluate-lasso-security): Secure AI Adoption at Enterprise Scale - [How to evaluate LatticeFlow AI](https://aicompliancevendors.com/faqs/how-to-evaluate-latticeflow-ai): A single platform to discover, evaluate and govern risk to secure your AI future. - [How to evaluate Luminos.Law (ZwillGen AI Division)](https://aicompliancevendors.com/faqs/how-to-evaluate-luminos-law): AI Division providing red team testing, audits, and legal guidance for AI systems. - [How to evaluate Mind Foundry](https://aicompliancevendors.com/faqs/how-to-evaluate-mind-foundry): Machine-speed decision support. Designed for deployment. - [How to evaluate ModelOp](https://aicompliancevendors.com/faqs/how-to-evaluate-modelop): Enterprise AI lifecycle management and governance platform - [How to evaluate Modulos AI Governance](https://aicompliancevendors.com/faqs/how-to-evaluate-modulos-ai): AI Governance Platform for Enterprises - [How to evaluate Monitaur](https://aicompliancevendors.com/faqs/how-to-evaluate-monitaur): Keeping AI honest is a full-time job. Ours. - [How to evaluate Naaia](https://aicompliancevendors.com/faqs/how-to-evaluate-naaia): Europe's AI Management System for AI Act compliance - [How to evaluate ORCAA](https://aicompliancevendors.com/faqs/how-to-evaluate-orcaa): How do you know your ai is working well for everyone? - [How to evaluate OneTrust AI Governance](https://aicompliancevendors.com/faqs/how-to-evaluate-onetrust-ai-governance): AI governance software that centralizes risk, automates compliance, and enforces controls across the AI lifecycle - [How to evaluate Patronus AI](https://aicompliancevendors.com/faqs/how-to-evaluate-patronus-ai): Industry-first automated evaluation and security platform for LLMs. - [How to evaluate Pillar Security](https://aicompliancevendors.com/faqs/how-to-evaluate-pillar-security): One platform to discover, govern, and secure every AI agent or workflow across your organization. - [How to evaluate Prompt Security](https://aicompliancevendors.com/faqs/how-to-evaluate-prompt-security): Prompt Security is the AI security company helping you manage GenAI risks. - [How to evaluate Promptfoo](https://aicompliancevendors.com/faqs/how-to-evaluate-promptfoo): Build Secure AI Applications - [How to evaluate Protect AI](https://aicompliancevendors.com/faqs/how-to-evaluate-protect-ai): The Platform for AI Security - [How to evaluate Robust Intelligence](https://aicompliancevendors.com/faqs/how-to-evaluate-robust-intelligence): - [How to evaluate Saidot](https://aicompliancevendors.com/faqs/how-to-evaluate-saidot): EU-native SaaS platform for AI governance — easy to start, efficient to maintain. - [How to evaluate Scrut Automation](https://aicompliancevendors.com/faqs/how-to-evaluate-scrut-automation): Security-First GRC for Modern Risk & Compliance - [How to evaluate Securiti Data Command Center](https://aicompliancevendors.com/faqs/how-to-evaluate-securiti-ai): Command Your Data AI Everywhere — unified intelligence and controls across hybrid multicloud environments. - [How to evaluate ServiceNow AI Control Tower](https://aicompliancevendors.com/faqs/how-to-evaluate-servicenow-ai-governance): Take control of any AI from a central intelligent hub — connect your AI strategy, governance, and management across the enterprise. - [How to evaluate TrojAI](https://aicompliancevendors.com/faqs/how-to-evaluate-trojai): Deploy AI Agents with Confidence. - [How to evaluate TrustArc](https://aicompliancevendors.com/faqs/how-to-evaluate-trustarc): AI-powered privacy platform for compliance and governance - [How to evaluate Trustible](https://aicompliancevendors.com/faqs/how-to-evaluate-trustible): Purpose-built AI governance platform for assessing, approving, and scaling AI - [How to evaluate ValidMind](https://aicompliancevendors.com/faqs/how-to-evaluate-validmind): AI governance platform for regulated financial services model risk management. - [How to evaluate Vanta](https://aicompliancevendors.com/faqs/how-to-evaluate-vanta): The AI-powered Trust Management Platform that automates compliance, manages risk, and proves trust continuously. - [How to evaluate Weights & Biases Weave](https://aicompliancevendors.com/faqs/how-to-evaluate-wb-weave): Deliver AI with confidence. - [How to evaluate WhyLabs](https://aicompliancevendors.com/faqs/how-to-evaluate-whylabs): The AI Observability Platform ## Editorial notes - Every profile carries a "Last verified" date. - Editorial best-of rankings, head-to-head comparison verdicts, and written commentary cannot be bought. - Vendors can pay for a Featured slot in directory listings; Featured slots are clearly labeled. - Framework summaries are informational and NOT legal advice.