# AI Compliance Index

## About this site

AI Compliance Index (aicompliance.ai) is an independent, editorially maintained directory of AI compliance, governance, and security tools. It is not a vendor and does not sell compliance software. It is NOT affiliated with: AICompliant (aicompliant.ai), Compliance.ai, or aicompliance.tech, which are separate companies.

Machine-readable surfaces: https://aicompliance.ai/llms.txt, https://aicompliance.ai/api/public/tools, https://aicompliance.ai/changelog, https://aicompliance.ai/jobs

> Agent-first directory of AI compliance and security tools. Every entry below has a structured JSON and markdown mirror.

Content on this site is AI-assisted, human-reviewed, and published under human editorial responsibility. Scores and rankings are editorial opinions. Disclaimer: https://aicompliance.ai/disclaimer

## Tools

- [ALIGNMT AI](https://aicompliance.ai/tools/alignmt-ai.md): Healthcare-focused AI governance with real-time risk monitoring and audit-ready reporting.
- [Alinia AI](https://aicompliance.ai/tools/alinia-ai.md): Real-time AI compliance guardrails for regulated industries, focused on financial services.
- [Aurascape](https://aicompliance.ai/tools/aurascape.md): AI-traffic security that decodes AI app protocols natively, enforcing policy at the tool-call level with cross-action data lineage.
- [Azure AI Content Safety](https://aicompliance.ai/tools/azure-ai-content-safety.md): Microsoft's managed content-safety API with prompt-shield protection for Azure-hosted AI workloads.
- [Braintrust](https://aicompliance.ai/tools/braintrust.md): Evaluation platform for LLM apps: evals, logging, and prompt experiment tracking.
- [CalypsoAI](https://aicompliance.ai/tools/calypsoai.md): AI security platform for model-agnostic guardrails, red-teaming, and inference protection — part of F5 since Sep 2025.
- [Cisco AI Defense](https://aicompliance.ai/tools/cisco-ai-defense.md): Cisco's end-to-end AI security: asset discovery, model testing, and runtime guardrails covering prompts, responses, and MCP traffic.
- [Comp AI](https://aicompliance.ai/tools/comp-ai.md): Open-source compliance automation (AGPLv3) for SOC 2, ISO 27001, HIPAA, and GDPR — a self-hostable Vanta alternative.
- [ConductorOne](https://aicompliance.ai/tools/conductorone.md): AI-native identity security and governance for human, non-human, and AI agent identities — access reviews, least-privilege automation, and agent access control at enterprise scale.
- [Coval](https://aicompliance.ai/tools/coval.md): Simulation and evaluation platform for AI voice and chat agents (YC-backed; $28M Series A, Jun 2026): pre-launch stress testing plus production monitoring, built by Waymo eval alumni.
- [Credal](https://aicompliance.ai/tools/credal.md): Secure enterprise AI platform with data permissions, DLP, and audit logging built in.
- [Credo AI](https://aicompliance.ai/tools/credo-ai.md): AI governance platform for model registries, risk assessments, and EU AI Act conformity.
- [CSA AI Controls Matrix](https://aicompliance.ai/tools/csa-ai-controls-matrix.md): Cloud Security Alliance's AI Controls Matrix v1.0.1 (Jul 2025): 243 controls across 18 domains with a five-role shared-responsibility model, crosswalked to NIST AI 600-1.
- [DeepEval](https://aicompliance.ai/tools/deepeval.md): Open-source LLM evaluation framework with pytest-style unit testing for AI applications.
- [DeepTeam](https://aicompliance.ai/tools/deepteam.md): Open-source LLM red-teaming framework with 40+ vulnerability scans and attack methods.
- [Dynamo AI](https://aicompliance.ai/tools/dynamo-ai.md): Compliance-focused AI evaluation, guardrails, and privacy testing for regulated industries.
- [Enkrypt AI](https://aicompliance.ai/tools/enkrypt-ai.md): AI red-teaming and guardrails platform with compliance-mapped risk scoring for LLMs.
- [EU GPAI Code of Practice](https://aicompliance.ai/tools/eu-gpai-code-of-practice.md): The EU's Code of Practice for general-purpose AI models (Jul 2025): transparency, copyright, and safety & security chapters that operationalize AI Act Chapter V obligations.
- [Fairly Trained](https://aicompliance.ai/tools/fairly-trained.md): Independent certification that a generative model was trained on licensed or public-domain data.
- [FairNow](https://aicompliance.ai/tools/fairnow.md): AI governance software for compliance tracking, bias audits, and risk management across jurisdictions.
- [Garak](https://aicompliance.ai/tools/garak.md): NVIDIA's open-source LLM vulnerability scanner with a modular probe library for injection, jailbreaks, and leakage.
- [Giskard](https://aicompliance.ai/tools/giskard.md): Open-source testing framework that scans ML models and LLM apps for vulnerabilities and quality issues.
- [Guardrails AI](https://aicompliance.ai/tools/guardrails-ai.md): Open-source framework for validating and structuring LLM outputs with composable validators.
- [HiddenLayer](https://aicompliance.ai/tools/hiddenlayer.md): Enterprise platform for ML model security: scanning, detection, and response for AI assets.
- [Holistic AI](https://aicompliance.ai/tools/holistic-ai.md): AI governance platform for auditing, risk management, and regulatory compliance tracking.
- [IBM watsonx.governance](https://aicompliance.ai/tools/ibm-watsonx-governance.md): IBM's enterprise AI governance platform for lifecycle monitoring, risk management, and regulatory compliance.
- [ISO/IEC 42001](https://aicompliance.ai/tools/iso-iec-42001.md): The first certifiable international standard for AI management systems (AIMS).
- [Keycard](https://aicompliance.ai/tools/keycard.md): Identity and access management for AI agents (a16z-backed, $38M): ephemeral task-scoped tokens replace static keys, with delegation chains, policy enforcement, and MCP/OAuth 2.1 standards support.
- [Lakera Guard](https://aicompliance.ai/tools/lakera-guard.md): Runtime LLM firewall for prompt injection, jailbreaks, and data leakage — now part of Check Point.
- [Langfuse](https://aicompliance.ai/tools/langfuse.md): Open-source LLM engineering platform (YC W23, MIT license): tracing, LLM-as-judge evals, prompt management, and datasets — the most widely adopted OSS option; part of ClickHouse since Jan 2026.
- [Lasso Security](https://aicompliance.ai/tools/lasso-security.md): LLM-focused security monitoring for shadow AI, data leakage, and prompt-level threats.
- [LLM Guard](https://aicompliance.ai/tools/llm-guard.md): Archived open-source toolkit of 35+ input/output scanners. Read-only since Jul 2026 after Palo Alto Networks folded Protect AI into Prisma AIRS.
- [Microsoft Presidio](https://aicompliance.ai/tools/presidio.md): Microsoft's open-source SDK for detecting and anonymizing PII in text, images, and structured data.
- [Mindgard](https://aicompliance.ai/tools/mindgard.md): Continuous automated red teaming and security testing for AI systems.
- [MITRE ATLAS](https://aicompliance.ai/tools/mitre-atlas.md): Knowledge base of adversarial tactics and techniques against AI systems, modeled on ATT&CK.
- [Modulos](https://aicompliance.ai/tools/modulos.md): ETH Zurich spin-out; first AI governance platform with ISO/IEC 42001 product conformity certification.
- [NeMo Guardrails](https://aicompliance.ai/tools/nemo-guardrails.md): NVIDIA's open-source toolkit for programmable conversational rails and safety policies inside LLM applications.
- [nexos.ai](https://aicompliance.ai/tools/nexos-ai.md): AI workspace and gateway giving enterprises governed access to 200+ models with guardrails.
- [Nightfall AI](https://aicompliance.ai/tools/nightfall-ai.md): AI-native data loss prevention that detects sensitive data across SaaS apps and LLM traffic.
- [NIST AI 600-1 (Generative AI Profile)](https://aicompliance.ai/tools/nist-ai-600-1.md): NIST's Generative AI Profile (Jul 2024): 12 GenAI risk categories with 200+ suggested actions, layered on the AI RMF's govern/map/measure/manage functions.
- [NIST AI RMF](https://aicompliance.ai/tools/nist-ai-rmf.md): The US reference framework for AI risk management: Govern, Map, Measure, Manage.
- [Noma Security](https://aicompliance.ai/tools/noma-security.md): Platform securing the AI lifecycle: supply chain, posture, and runtime threat detection.
- [Norm Ai](https://aicompliance.ai/tools/norm-ai.md): Regulatory AI agents that convert regulations into computer code for automated compliance checks.
- [Oneleet](https://aicompliance.ai/tools/oneleet.md): Security-first compliance platform: pentesting, code scanning, and SOC 2 / ISO 27001 automation in one.
- [OneTrust AI Governance](https://aicompliance.ai/tools/onetrust-ai-governance.md): AI governance module of the OneTrust trust intelligence platform.
- [OWASP Agentic AI Security & Governance](https://aicompliance.ai/tools/owasp-agentic-ai-security.md): OWASP's State of Agentic AI Security and Governance 2.0 (2026): frameworks and controls for securing autonomous agents, including the Top 10 for Agentic Applications.
- [OWASP LLM Top 10](https://aicompliance.ai/tools/owasp-llm-top-10.md): Community-maintained checklist of the ten most critical risks for LLM applications.
- [Patronus AI](https://aicompliance.ai/tools/patronus-ai.md): Automated evaluation and guardrails platform for scoring and monitoring LLM system failures.
- [Pillar Security](https://aicompliance.ai/tools/pillar-security.md): Security platform covering the AI lifecycle from posture management to runtime guardrails.
- [Prisma AIRS](https://aicompliance.ai/tools/prisma-airs.md): Palo Alto Networks' end-to-end AI security platform: runtime firewall, model scanning, AI red teaming, and agent security (v3.0, Mar 2026) — where Protect AI and LLM Guard's lineage landed after the 2025 acquisition.
- [Private AI](https://aicompliance.ai/tools/private-ai.md): On-prem PII, PHI, and PCI detection and redaction across 50+ languages and unstructured formats.
- [Prompt Security](https://aicompliance.ai/tools/prompt-security.md): Real-time GenAI security for employee and agent AI use, with an MCP gateway — part of SentinelOne since Sep 2025.
- [PromptArmor](https://aicompliance.ai/tools/promptarmor.md): LLM application security (YC W24): real-time threat detection for prompt injection, data exfiltration, and agent manipulation, plus AI vendor risk assessments.
- [Promptfoo](https://aicompliance.ai/tools/promptfoo.md): CLI and library for systematic LLM testing, red-teaming, and eval-driven development — acquired by OpenAI in 2026.
- [PyRIT](https://aicompliance.ai/tools/pyrit.md): Microsoft's Python Risk Identification Toolkit for automated generative-AI red teaming.
- [Ragas](https://aicompliance.ai/tools/ragas.md): Open-source evaluation framework purpose-built for retrieval-augmented generation pipelines.
- [Scan Ninja](https://aicompliance.ai/tools/scan-ninja.md): AI-driven vulnerability management that turns scanner output into prioritized fixes and audit-ready compliance evidence.
- [Skyflow](https://aicompliance.ai/tools/skyflow.md): Data privacy vault that isolates and tokenizes sensitive data for AI and application workloads.
- [Spawning](https://aicompliance.ai/tools/spawning.md): Consent infrastructure for AI training data: Do Not Train registry and dataset opt-outs.
- [Straiker](https://aicompliance.ai/tools/straiker.md): AI-native security for agentic AI: agent discovery and posture, continuous red teaming, and runtime guardrails against prompt injection and tool abuse.
- [Trustible](https://aicompliance.ai/tools/trustible.md): AI governance platform for inventory, risk assessment, policy, and regulatory compliance workflows.
- [Vanta](https://aicompliance.ai/tools/vanta.md): Automated compliance platform covering ISO 42001, NIST AI RMF, and EU AI Act alongside SOC 2.
- [WitnessAI](https://aicompliance.ai/tools/witnessai.md): Enterprise AI observability and policy guardrails for safe employee and app AI usage.
- [Zania](https://aicompliance.ai/tools/zania.md): AI agents for security compliance: risk assessments, audits, and questionnaire automation.
- [Zenity](https://aicompliance.ai/tools/zenity.md): Security and governance for AI agents and low-code copilots across the enterprise.

## Comparisons

- https://aicompliance.ai/compare/credo-ai-vs-guardrails-ai
- https://aicompliance.ai/compare/credo-ai-vs-lakera-guard
- https://aicompliance.ai/compare/credo-ai-vs-llm-guard
- https://aicompliance.ai/compare/credo-ai-vs-nemo-guardrails
- https://aicompliance.ai/compare/guardrails-ai-vs-lakera-guard
- https://aicompliance.ai/compare/guardrails-ai-vs-llm-guard
- https://aicompliance.ai/compare/guardrails-ai-vs-nemo-guardrails
- https://aicompliance.ai/compare/lakera-guard-vs-llm-guard
- https://aicompliance.ai/compare/lakera-guard-vs-nemo-guardrails
- https://aicompliance.ai/compare/llm-guard-vs-nemo-guardrails
- https://aicompliance.ai/compare/garak-vs-pyrit

## API

- [Full dataset (JSON)](https://aicompliance.ai/api/public/tools)
- Per-tool JSON: https://aicompliance.ai/api/public/tools/{slug}.json
- Per-tool Markdown: https://aicompliance.ai/tools/{slug}.md