AI Compliance Vendors

SOC 2 vendors for SaaS & Technology

Vendors that support SOC 2 (Service Organization Control 2) and explicitly serve saas & technology customers. Each vendor’s last-checked date is shown in the table.

VendorHQFoundedSizePricingLast checked
Scrut AutomationPalo Alto, United States202151-200Contact for pricingSep 21, 2026
BraintrustSan Francisco, United States202351-200Starter free ($0/mo, 1GB data/10k scores incl., overage $4/GB $2.50/1k); Pro $249/mo (5GB/50k incl., overage $3/GB $1.50/1k); Enterprise custom.Sep 21, 2026
Modulos AI GovernanceZurich, Switzerland201811-50Contact for pricingSep 21, 2026
AporiaSan Jose, United States201951-200Enterprise pricing only. Not publicly listed.Apr 27, 2026
Lasso SecurityTel Aviv, Israel202311-50Enterprise pricing only. Not publicly listed.Sep 21, 2026
QL SecurityUnited Kingdom——Contact for pricingSep 21, 2026
PrivacyScrubberUnited States——Contact for pricingSep 21, 2026
DrataUnited States2020—GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract.Oct 15, 2026
Harmonic SecurityLondon, United Kingdom2023—Three packages, Explore, Guide and Command (marked most popular), are listed on Harmonic's pricing page without prices; the page offers a demo. AWS Marketplace lists "Harmonic Security - Explore" at $163.00 per user per year on a 12-month contract, with a 200-user minimum and private offers for custom quotes.Oct 15, 2026

About SOC 2

SOC 2 is an AICPA auditing standard for service organizations, evaluating controls relevant to security, availability, processing integrity, confidentiality, and privacy. While not AI-specific, SOC 2 Type II reports are table stakes for B2B SaaS vendors — including AI governance platforms — and are frequently mapped to AI-specific risk frameworks.

Read framework guide →

About SaaS & Technology

B2B SaaS providers embedding AI features. Primary driver of ISO/IEC 42001 adoption as procurement signal.

See all saas & technology vendors →