Information Security Compliance

CompAI is an open-source compliance automation platform that streamlines SOC 2, ISO 27001, and GDPR compliance through automated evidence collection and continuous monitoring. It offers pre-mapped controls, real-time insights, and seamless integrations to simplify audits and enhance risk management.

Vanta automates compliance evidence collection for 35+ frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It centralizes access controls, risk assessments, and vendor reviews, while AI‑driven workflows speed questionnaire responses and continuous monitoring with real‑time alerts.

EasyAudit is an AI-driven platform that simplifies security compliance, enabling faster adherence to frameworks like SOC 2 and GDPR through user-friendly self-assessment reports, automated documentation, and control mapping for efficient audit readiness.

Secure.com is a 24/7 AI security operations platform that provides agentless asset discovery, continuous monitoring, and automated threat investigation. It centralizes telemetry, prioritizes high-risk incidents, and enables no-code automated response to improve detection and remediation times.

SimplifiedIQ is a privacy-focused AI tool that enhances data protection through features like data anonymization, real-time monitoring, and compliance tracking, making it ideal for businesses and individuals in sensitive industries like finance and healthcare.

Suzan AI automates governance, risk, and regulatory compliance, continuously monitoring policy adherence, generating audit trails, and delivering real‑time risk assessments. It supports GDPR, SOC 2, ISO 27001, and industry regulations, and integrates with existing systems for automated workflows and

RAISE Pathways maps 1,100 controls to 17 standards (ISO, NIST, OWASP, FinOps, TBM) for AI risk assessment, compliance, and lifecycle governance. It delivers metrics on risk, cost, carbon, and integrates with existing workflows.

Sprinto is a continuous security and compliance platform that automates evidence collection and risk monitoring. It integrates with cloud services to streamline audit readiness across 40+ frameworks.

Clarity AI delivers AI‑powered ESG, climate, and regulatory intelligence, aggregating verified data from 98k issuers and millions of companies. Its modular, API‑ready components support risk management, impact investing, portfolio analysis, and compliance reporting with real‑time analytics.

HTCD is a cloud security and compliance tool that delivers real-time visibility into compliance posture, integrates threat detection, and simplifies remediation processes across multi-cloud environments like AWS and Azure, all through a user-friendly natural language interface.

AI agents scan 300,000+ sources—including dark‑web forums and new domains—to deliver real‑time OSINT alerts with context on threat actors, intent, and campaigns. Customizable workflows target phishing, insider risk, or credential leaks, enabling rapid response and fraud reduction.

ShieldForce is an AI‑driven cybersecurity platform that offers 24/7 monitoring, a managed SOC, email protection, and automated disaster recovery. It delivers real‑time threat detection, incident response, compliance tools for regulated sectors, and scalable modular plans.

Nex AI ingests, validates, and streams structured and unstructured data to AI agents or ERP/CRM systems, offering compliance checks, risk flagging, fraud detection, instant alerts, audit trails, and secure API integration with multiple data platforms.

Oversight centralizes financial and compliance data, delivering continuous monitoring, fraud detection, and audit automation. Machine‑learning models achieve 95% risk‑detection and 99% duplicate‑payment prevention, integrating natively with ERP and spend‑management systems.

Reqi is a cloud‑based platform that consolidates systems engineering data, offers real‑time compliance tracking, AI‑driven PDF requirement extraction, full V‑model traceability, and secure dashboards for risk and safety management.

Signify automates regulatory review by scanning formulas, artwork, and documents to identify gaps against U.S., Canadian, and international rules. It creates checklists, traceability matrices, and an audit trail, and integrates with ERP, eQMS, and PLM to speed approvals.

IONI automates compliance for regulated industries, ingesting documents and data to generate HACCP plans, SOPs, and dashboards quickly. It provides real‑time monitoring, gap analysis, and actionable recommendations, reducing audit risk and manual effort.

Swif's AI-driven unified device management simplifies security, access, and compliance on MacOS, Windows, and Linux. It automates control, configures smart groups, boosts remote operations, and integrates smoothly for SOC2 certification, ensuring data protection.

Capitol AI is a SOC 2‑compliant OS that converts enterprise data into decision‑grade intelligence while keeping it in‑house. It supports any model, automates reports, and integrates PDFs, databases, and APIs with granular roles and no‑code tools for rapid deployment in regulated sectors.

Entrust provides identity-centric security: centralized PKI, HSMs, certificate and key lifecycle management, digital signing, identity verification (document checks, biometrics, trusted data) and instant digital card issuance, with APIs and post-quantum cryptography options for compliance.

Intellewings is an AML compliance platform that offers sanctions screening, PEP screening, adverse media checks, and transaction monitoring, helping financial institutions maintain regulatory adherence and enhance risk management processes.

VisibleThread automates RFP tasks: it generates compliance matrices, flags risky clauses, tracks document changes, and produces consistent content. Integrated with SharePoint and secure environments, it centralizes data and shortens proposal cycle time.

Intapp Celeste is an agentic AI platform for professional services that automates routine tasks, enforces compliance, and streamlines intake workflows. It pulls firm data, provides risk assessment, conflict detection, ethical wall enforcement, and captures timekeeping from emails, meetings, and docu

Inspectorio centralizes supply‑chain data, automating compliance checks, audit report generation, and risk analysis through AI. It offers real‑time insights into quality, supplier performance, sustainability, and production milestones, enabling faster, data‑driven decisions.

ComplyCube provides automated online identity verification and KYC solutions, enhancing customer onboarding with real-time document checks, biometric verification, and AML screening. It integrates easily into existing workflows, benefiting industries like financial services and e-commerce.

Kyber is an AI-driven workflow solution for the insurance industry, streamlining the drafting and reviewing of complex insurance notices through customizable templates, collaborative review features, and integration with mail services, ensuring efficient processes and secure data management.

CookieChimp is an AI-driven consent management platform for websites, ensuring GDPR, CCPA/CPRA, and VCDPA compliance. It streamlines cookie detection, consent tracking, and offers customizable banner templates, detailed analytics, and robust record-keeping features.

Squirro consolidates structured and unstructured data using knowledge graphs and AI guardrails, delivering secure, compliant analytics for regulated sectors. It offers document intelligence, semantic search, real‑time compliance monitoring, and privacy controls, enabling faster decisions and reduced

SecGPT uses AI to analyze cybersecurity reports and provide insights.

BeetleLabs automates KYC/KYB onboarding, document verification, and AML/PEP checks using OCR and identity verification. It provides real‑time alerts, risk scoring, continuous monitoring, audit‑ready reporting, and a secure compliance dashboard for fintech and financial institutions.

Privacy Policy is an essential document that details the collection, use, and protection of personal information from users. It outlines types of data collected and explains security measures, ensuring user trust and informed consent regarding their information.

RAFA PRO audits workflows, maps tool hand‑offs, and deploys AI agents for compliance, portfolio, and client engagement tasks. It consolidates half a firm’s SaaS stack, reduces compliance review time by up to 95 %, and speeds prospect‑to‑client conversion.

Persys Value Privacy Use is an AI tool that enhances data privacy management through automated data classification, risk assessment, and compliance monitoring, ensuring adherence to regulations like GDPR and CCPA while protecting sensitive information.

Polymer Runtime Data Security provides a framework for securing AI workflows by identifying and mitigating real-time security threats. It automates policy enforcement, continuous monitoring, and compliance with regulations like HIPAA and GDPR, ensuring robust data protection.

Auditive automates third‑party risk management by continuously monitoring compliance, insurance, and media. It builds real‑time risk profiles, generates forensic audit records, and integrates with procurement tools to reduce bottlenecks and support regulatory transparency.

FORA aggregates data from meetings, emails, chat, and CRM to generate time‑coded summaries with action items, competitive insights, and customer feedback. It enforces compliance, risk detection, and secure access, enabling informed decisions with enterprise‑grade data protection.

iManage centralizes document and email management with secure cloud storage, AI-driven classification, data extraction and a natural-language assistant for search and automation, while enforcing access controls, governance, legal transaction workflows and Microsoft co-authoring.

TrustLayer is a cloud-native cybersecurity platform that unifies email security, CASB, web protection and SaaS posture management, offering centralized policy enforcement, real-time threat detection, automated response, and role-based identity controls for MSPs and midmarket IT teams.

iDox.ai protects sensitive data by automating redaction, masking, and anonymization of documents before they leave an organization. It enforces real‑time AI guardrails, provides role‑based access and audit logs, and centralizes compliance with GDPR, HIPAA, SOX, and other regulations.

Aleph Alpha offers specialized large language models built on EU infrastructure, trained on domain‑specific data for legal, administrative, industrial, and scientific use. It ensures data sovereignty, compliance, and real‑time workflow integration for secure AI in public, manufacturing, and defense

Vectra AI ingests and normalizes traffic from data centers, cloud, SaaS, IoT, and identity sources. Its AI engine detects MITRE ATT&CK techniques, prioritizes alerts, and supports containment of compromised devices, accounts, and traffic paths, integrating with SIEM, EDR, MDR workflows.

Binarly is a firmware security tool that automates binary analysis to identify and manage vulnerabilities in software and firmware, offering proactive risk detection, prescriptive fixes, and continuous compliance reporting for enhanced supply chain security.

Nightfall AI is an enterprise-level data leak prevention platform utilizing generative AI technology. It safeguards sensitive data across channels, automates protection against evolving threats, and enhances compliance through advanced encryption and data exfiltration prevention.

Equixly is an AI‑driven continuous offensive security platform that maps and attacks an organization’s attack surface in real time. It automatically discovers APIs, executes adaptive attack paths, validates exploits, and delivers continuous visibility, alerts, and audit‑ready remediation tracking.

iCustoms AI automates customs and trade compliance for importers, exporters, freight forwarders, carriers, and postal operators, extracting and validating documents across the UK, Ireland, EU, and US; it classifies HS/HTS codes, calculates duties, screens restricted items, and integrates with ERP/WM

Personal Cybersecurity Assistant" is a comprehensive AI tool offering personalized guidance on online security, password management, network security, and incident response strategies. Strengthen your online presence and protect your personal information from cyber threats effectively.

Sidentity is a digital identity management tool that prioritizes privacy and security. It features identity verification, data encryption, and access control, while offering integration with applications and analytics for efficient user identity management.

ComplyOps is a compliance-focused PLM platform that automates regulatory management, streamlining certification tracking, documentation, and proactive compliance. It enhances product lifecycle efficiency, particularly in heavily regulated sectors like IoT and pharmaceuticals.

KYC Hub centralizes identity verification, AML screening, and risk orchestration for banks and fintechs, offering real‑time, biometric‑enabled ID checks, no‑code workflow design, integrated sanctions and watchlist data, and instant transaction monitoring for faster onboarding.

Naaia is an AI compliance platform that converts regulations into actionable workflows, supports the EU AI Act and global standards, tracks AI inventories, generates compliance action plans, provides multilingual training, and integrates via APIs with GitLab, Azure, Slack, etc., ensuring secure gove