SOC 2 vendors for Financial Services
Vendors that support SOC 2 (Service Organization Control 2) and explicitly serve financial services customers. Each vendor’s last-checked date is shown in the table.
| Vendor | HQ | Founded | Size | Pricing | Last checked |
|---|---|---|---|---|---|
| Scrut Automation | Palo Alto, United States | 2021 | 51-200 | Contact for pricing | Sep 21, 2026 |
| WhyLabs | Seattle, United States | 2019 | 11-50 | Free tier for 1 model; $100/month for 2 models, scaling per model up to enterprise at $8,333/month (AWS Marketplace listing). | Oct 1, 2026 |
| Credo AI | Palo Alto, United States | 2020 | 51-200 | Contact sales for enterprise subscription quote. | Sep 21, 2026 |
| Arthur | New York, United States | 2019 | 51-200 | Free tier available; Premium at $60/mo; Enterprise custom, contact sales. | Sep 21, 2026 |
| Modulos AI Governance | Zurich, Switzerland | 2018 | 11-50 | Contact for pricing | Sep 21, 2026 |
| Aporia | San Jose, United States | 2019 | 51-200 | Enterprise pricing only. Not publicly listed. | Apr 27, 2026 |
| Lasso Security | Tel Aviv, Israel | 2023 | 11-50 | Enterprise pricing only. Not publicly listed. | Sep 21, 2026 |
| PrivacyScrubber | United States | — | — | Contact for pricing | Sep 21, 2026 |
| Meilynx | United States | — | — | Contact for pricing | Sep 21, 2026 |
| Drata | United States | 2020 | — | GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract. | Oct 15, 2026 |
| Fiddler AI | Palo Alto, United States | 2018 | — | Three plans: Free (real-time guardrails for hallucinations, toxicity, PII/PHI, prompt injection and jailbreaks, powered by Fiddler's Centor models); Developer at $0.002 per trace (adds unified observability with tests and experiments for agentic and predictive systems, custom evaluators and bring-your-own judge, role-based access control and SSO; SaaS only); and Enterprise, priced by sales (adds enterprise-grade guardrails and scale, SaaS, VPC or on-premises deployment, and a named customer success manager). The pricing page lists no trace or user limits. | Oct 15, 2026 |
| Giskard | Paris, France | 2021 | — | No prices are published. Two plans: Open-source, a free Python library for local agent experiments with community support, and Professional, quoted on request ('Get your AI audited'). Professional adds automated audits with 50+ adversarial probes, evaluation dataset generation, SSO and role-based access, CI/CD integration through the SDK, on-premise, private cloud or SaaS deployment, and support with SLAs. Advisory on fixes and guardrails is an extra service. Giskard advertises a free Agentic Red Teamer trial with limited spots and an offer for startups and small teams, without stating terms for either. | Oct 15, 2026 |
About SOC 2
SOC 2 is an AICPA auditing standard for service organizations, evaluating controls relevant to security, availability, processing integrity, confidentiality, and privacy. While not AI-specific, SOC 2 Type II reports are table stakes for B2B SaaS vendors — including AI governance platforms — and are frequently mapped to AI-specific risk frameworks.
Read framework guide →About Financial Services
Banking, lending, insurance, and capital markets firms deploying AI for credit decisioning, fraud detection, underwriting, algorithmic trading, and customer service. Subject to heavy sector-specific oversight (OCC, FRB, CFPB, FCA, EBA) layered on top of horizontal AI regulations.
See all financial services vendors →