AI Compliance Vendors

SOC 2 vendors for SaaS & Technology

Vendors that support SOC 2 (Service Organization Control 2) and explicitly serve saas & technology customers. Each vendor’s last-checked date is shown in the table.

VendorHQFoundedSizePricingLast checked
AporiaSan Jose, United States201951-200Enterprise pricing only. Not publicly listed.Apr 27, 2026
BraintrustSan Francisco, United States202351-200Starter free ($0/mo, 1GB data/10k scores incl., overage $4/GB $2.50/1k); Pro $249/mo (5GB/50k incl., overage $3/GB $1.50/1k); Enterprise custom.Sep 21, 2026
Scrut AutomationPalo Alto, United States202151-200Contact for pricingSep 21, 2026
DrataUnited States2020—GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract.Oct 15, 2026
Harmonic SecurityLondon, United Kingdom2023—Three packages, Explore, Guide and Command (marked most popular), are listed on Harmonic's pricing page without prices; the page offers a demo. AWS Marketplace lists "Harmonic Security - Explore" at $163.00 per user per year on a 12-month contract, with a 200-user minimum and private offers for custom quotes.Oct 15, 2026
QL SecurityUnited Kingdom——Contact for pricingSep 21, 2026
Modulos AI GovernanceZurich, Switzerland201811-50Contact for pricingSep 21, 2026
Lasso SecurityTel Aviv, Israel202311-50Enterprise pricing only. Not publicly listed.Sep 21, 2026
PrivacyScrubberUnited States——Contact for pricingSep 21, 2026

About SOC 2

SOC 2 is an AICPA auditing standard for service organizations, evaluating controls relevant to security, availability, processing integrity, confidentiality, and privacy. While not AI-specific, SOC 2 Type II reports are table stakes for B2B SaaS vendors — including AI governance platforms — and are frequently mapped to AI-specific risk frameworks.

Read framework guide →

About SaaS & Technology

B2B SaaS providers embedding AI features. Primary driver of ISO/IEC 42001 adoption as procurement signal.

See all saas & technology vendors →