AI TrustMark

AI risk management companies, products & suppliers

AI risk-management products score and treat risks across AI systems — privacy, safety, security, third parties — often mapping to NIST AI RMF or ISO-style processes. Buyers want a risk register with treatments, not a chatbot policy.

What is AI risk management?

AI risk-management products score and treat risks across AI systems — privacy, safety, security, third parties — often mapping to NIST AI RMF or ISO-style processes. Buyers want a risk register with treatments, not a chatbot policy.

What problems does it solve?

Risk is discussed in slides but not recorded against a live system with an owner and due date.

Typical business use cases

  • Risk registers
  • Vendor AI risk
  • Treatment tracking

Important capabilities

  • Scoring
  • Workflow
  • Framework mapping
  • Reporting

What buyers should evaluate

  • Framework fit
  • Scoring transparency
  • Integration to inventory

Risks and governance considerations

Traffic-light scores with no test underneath.

Procurement checklist

  • Methodology disclosure
  • Export
  • Link to systems
  • Owners

Relevant AI Trustmark assurance

Trustmark risk class is independently determined during assessment and is not imported from a vendor GRC score.

Methodology · How verification works

Products and providers

Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.

  • AI governance advisory and free AI risk calculatorClaimed

    By PolyGovern

    PolyGovern is an AI governance advisory firm for regulated and public-sector organisations in Australia. It helps banks, insurers, superannuation trustees, healthcare and governmen

  • Archer Evolv Risk

    By Archer

    Archer Evolv Risk is Archer's AI-assisted risk intelligence product. It applies analytics, real-time insight and quantitative risk assessment to help enterprise risk teams spot eme

  • Credo AI Governance Platform

    By Credo AI

    Operationalize Trusted AI governance with Credo AI: discover AI, enforce policies, prove compliance, and manage risk across every model, agent, and application. Credo AI Governance

  • Diligent One Platform

    By Diligent

    The Diligent One Platform unifies board management and governance, risk and compliance (GRC) applications in one place, so organisations can see risk across the business and curate

  • FairNow AI Governance Platform

    By FairNow

    Optro’s AI Governance solution ensures compliance, manages risk, and drives responsible AI innovation at scale. FairNow AI Governance Platform is FairNow's software product, from F

  • Holistic AI Governance Platform

    By Holistic AI

    Holistic AI is the leading enterprise AI governance platform. One end-to-end tool to identify, protect, and enforce AI governance at scale. Get a demo. Holistic AI Governance Platf

  • LogicGate Risk Cloud

    By LogicGate

    LogicGate Risk Cloud is the leading AI-powered GRC platform with 30+ applications for enterprise risk, third-party risk, cyber risk and compliance management. LogicGate Risk Cloud

  • LogicManager

    By LogicManager

    Manage Tomorrow’s Surprises Today with LogicManager’s Leading (ERM) Enterprise Risk Management Software. Improve Performance with a risk-based approach to ERM. LogicManager is Logi

  • MetricStream ConnectedGRC

    By MetricStream

    MetricStream provides Governance, Risk and Compliance (GRC) software solutions that allow companies across various industries to streamline and automate their enterprise-wide GRC p

  • Microsoft Purview Data Security Posture Management for AI

    By Microsoft

    Microsoft Purview Data Security Posture Management (DSPM) for AI, previously known as Microsoft Purview AI Hub, is a central place in the Microsoft Purview portal for securing data

  • Riskonnect Integrated Risk Management

    By Riskonnect

    The world’s largest risk management software provider offers the ability to reduce risk, increase efficiency, and improve organizational performance. Riskonnect Integrated Risk Man

  • SAI360 Enterprise & Operational Risk

    By SAI360

    SAI360 Enterprise & Operational Risk is SAI360's software product, from SAI Global Compliance, Inc. Published at sai360.com/solutions/enterprise-operational-risk-management. Direct

  • ServiceNow Integrated Risk Management

    By ServiceNow

    ServiceNow sells workflow software for IT, customer and employee operations, with Now Assist AI features. Public pages cover enterprise workflow platforms. ServiceNow Integrated Ri

Products

Claimed products appear first. Ranking packs and payment do not change this list.

Also used in this category

These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.

Related categories

Relevant procurement and assurance guides

Frequently asked questions

Will this change a Trustmark score?

No. Directory and GRC tools cannot buy or alter independent assessment outcomes.

What is AI risk management?

AI risk-management products score and treat risks across AI systems — privacy, safety, security, third parties — often mapping to NIST AI RMF or ISO-style processes. Buyers want a risk register with treatments, not a chatbot policy.

Is an AI governance questionnaire the same as independent verification?

No. Governance platforms help an organisation inventory systems and attest to policy. They do not replace independent testing of a production product. A completed questionnaire is operator documentation unless independently sampled.

What human oversight should buyers specify for consequential AI decisions?

Oversight is not a confirm button. Buyers should specify who can approve or stop an outcome, whether they have time and competence, what they see, and how that review is logged. Independent assessment records the oversight that was evidenced for the named scope.

What model or provider changes should a buyer insist on being told about?

Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.

How should buyers verify where AI customer data is processed?

Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.

Does a TrustMark on one product cover the rest of the company?

No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.

What incident-handling evidence is useful for AI suppliers?

Buyers should see how AI-specific failures are detected, contained and notified — including unsafe outputs, data leakage and unauthorised agent actions. An incident policy that never mentions models, prompts or tools is incomplete for this class of product.