category hub
AI Governance & Risk Management
Platforms for AI inventory, risk assessment, policy enforcement, and audit-ready evidence mapped to the EU AI Act, NIST AI RMF, and ISO/IEC 42001.
22 tools
Includes 16 on-the-radar listings that are vendor-claimed and not independently verified.
Free
3PEAT AI Compliance Framework Builder
Free interactive builder that walks SMEs through an AI system register, statement of intent, governance roles, Article 5 prohibited-practice check and risk/impact assessment to produce a shareable AI compliance framework PDF. Grounded in EU AI Act, ISO/IEC 42001 and Australian AI standards; aimed at Singapore, Hong Kong and Australia. Vendor-claimed.
Enterprise
ALIGNMT AI
Healthcare-focused AI governance with real-time risk monitoring and audit-ready reporting.
Enterprise
Alinia AI
Real-time AI compliance guardrails for regulated industries, focused on financial services.
Open Source
Comp AI
Open-source compliance automation (AGPLv3) for SOC 2, ISO 27001, HIPAA, and GDPR — a self-hostable Vanta alternative.
Paid
DocsOrb
AI usage governance for SMBs: an AI tool registry with approve/restrict/monitor workflows, policy-to-training pipelines, comprehension-gated acknowledgments, and audit-ready evidence. EU AI Act, Colorado AI Act, and ISO 42001 alignment. DocsOrb UG (Germany), sales-led pricing.
Enterprise
Dynamo AI
Compliance-focused AI evaluation, guardrails, and privacy testing for regulated industries.
Paid
FairNow
AI governance software for compliance tracking, bias audits, and risk management across jurisdictions.
Enterprise
Holistic AI
AI governance platform for auditing, risk management, and regulatory compliance tracking.
Enterprise
IBM watsonx.governance
IBM's enterprise AI governance platform for lifecycle monitoring, risk management, and regulatory compliance.
Free
IRM AI Governance Playbook
Free generator that builds a tailored AI governance framework for small businesses adopting AI apps, agents or agentic workflows — risk findings, recommendations and a 90-day plan aligned to NIST AI RMF, ISO/IEC 42001, the EU AI Act and Canadian privacy law. From IRM Consulting & Advisory; vendor-claimed.
Free
IRM ISO 42001 Gap Assessment
Free self-serve gap assessment against ISO/IEC 42001:2023 — Clauses 4–10 at Basic scope, plus all 38 Annex A controls at Standard scope — producing a downloadable report with risk-ranked gaps and a remediation roadmap. From IRM Consulting & Advisory; vendor-claimed.
Paid
MeshAI
OpenTelemetry-native "agent control plane" from MeshAI Labs (founder ex-AWS): auto-registers every AI agent that emits telemetry, attributes token spend by team and agent, enforces policy via OTLP ingest or an inline LLM proxy, and generates EU AI Act Article 12 records and Article 73 incident evidence from runtime traces. Pre-GA pilot programme as of August 2026.
Enterprise
Modulos
ETH Zurich spin-out; first AI governance platform with ISO/IEC 42001 product conformity certification.
Enterprise
Norm Ai
Regulatory AI agents that convert regulations into computer code for automated compliance checks.
Paid
NotSoHuman
EU AI Act Article 50 website scanner: crawls a public website, flags AI-written text, AI-generated images, chatbots and AI widgets, and reports what may need labelling or disclosure. Subscription from €39/month; vendor-claimed, submitted via directory form.
Enterprise
OneTrust AI Governance
AI governance module of the OneTrust trust intelligence platform.
Paid
packets
Managed compliance platform for AI-native SaaS: AI agents draft policies, collect evidence and map controls for ISO 42001, EU AI Act, SOC 2, ISO 27001, GDPR, HIPAA and India's DPDP, with a named Compliance Lead accountable for the program. Vendor-claimed; submitted via directory form.
Paid
Screenata
Agent-run SOC 2 and HIPAA readiness for startups: an AI compliance officer ("Vera") scans GitHub, cloud, and your IdP, then writes policies from what it finds and flags claims the evidence does not support. Evidence packs ship with SHA-256 manifests, RSA/ECDSA signatures, and RFC 3161 timestamps, plus bring-your-own-key signing. Slack, CLI, GitHub App, and MCP surfaces; flat $5,988/year per framework, under 50 employees.
Enterprise
Trustible
AI governance platform for inventory, risk assessment, policy, and regulatory compliance workflows.
Paid
Vanta
Automated compliance platform covering ISO 42001, NIST AI RMF, and EU AI Act alongside SOC 2.
Free
Veriakt
Guided EU AI Act self-assessment for European SMEs: a 10-minute plain-language intake classifies each AI system as prohibited, high, limited or minimal risk with the specific Article or Annex III basis, then returns a gap report and a ready-to-adopt internal AI policy. Waitlist only as of August 2026; free for the first 100 companies.
Paid
Zania
AI agents for security compliance: risk assessments, audits, and questionnaire automation.
faq
Frequently asked questions
- What does AI Governance & Risk Management cover?
- AI Governance & Risk Management groups tools that share a primary capability area. Use this hub to compare options, see pricing models, and shortlist before booking demos.
- How is the AI Governance & Risk Management list maintained?
- Each tool is reviewed against vendor docs and trust pages. The "last verified" date on each tool page reflects the most recent review.
- Can I submit a tool for AI Governance & Risk Management?
- Yes. Use the Submit page to send a vendor link; we review it against the directory criteria.