Regulatory compliance companies, products & suppliers
Evidence and workflow against named AI or data laws and standards. Jobs: eu ai act style evidence; sector rule mapping; obligation tracking.
What is Regulatory compliance?
Evidence and workflow against named AI or data laws and standards. Jobs: eu ai act style evidence; sector rule mapping; obligation tracking.
What problems does it solve?
Legal needs artefacts mapped to a regulation, not another inventory.
Typical business use cases
- EU AI Act style evidence
- Sector rule mapping
- Obligation tracking
Important capabilities
- Regulation library
- Evidence binding
- Attestations
What buyers should evaluate
- Which regimes are actually modelled
- Lawyer workflow
- Export
Risks and governance considerations
A 'compliant' badge that is a checklist, not evidence.
Procurement checklist
- Regime list
- Evidence export
- Legal owner
Relevant AI Trustmark assurance
AI Trustmark independent findings appear only when an assessment or certificate exists. Category membership does not imply verification.
Products and providers
Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.
By PolyGovern
PolyGovern is an AI governance advisory firm for regulated and public-sector organisations in Australia. It helps banks, insurers, superannuation trustees, healthcare and governmen
By Archer
Archer Evolv Compliance is Archer's AI-assisted compliance management product. It combines regulatory intelligence, automated gap analysis and integrated workflows so compliance te
By BABL AI
BABL AI provides independent audit and assurance of AI systems, giving regulators, buyers, insurers and boards evidence that an AI system does what its owner claims. Engagements in
By Credo AI
Operationalize Trusted AI governance with Credo AI: discover AI, enforce policies, prove compliance, and manage risk across every model, agent, and application. Credo AI Governance
By FairNow
Optro’s AI Governance solution ensures compliance, manages risk, and drives responsible AI innovation at scale. FairNow AI Governance Platform is FairNow's software product, from F
By Holistic AI
Holistic AI is the leading enterprise AI governance platform. One end-to-end tool to identify, protect, and enforce AI governance at scale. Get a demo. Holistic AI Governance Platf
By IBM
IBM OpenPages is a governance, risk and compliance (GRC) platform that brings risk, compliance and audit work into one integrated system, deployable on any cloud or on-premises. It
By LogicGate
LogicGate Risk Cloud is the leading AI-powered GRC platform with 30+ applications for enterprise risk, third-party risk, cyber risk and compliance management. LogicGate Controls Co
By MetricStream
MetricStream provides Governance, Risk and Compliance (GRC) software solutions that allow companies across various industries to streamline and automate their enterprise-wide GRC p
By NAVEX
NAVEX One is NAVEX's software product, from NAVEX Global, Inc. Published at navex.com/products. Directory filing: Regulatory compliance. Vendor legal name on this product record: N
By OneTrust
OneTrust helps companies manage privacy, consent, and AI governance while automating compliance and reducing risk to build trust and drive innovation. OneTrust Compliance Automatio
By Riskonnect
The world’s largest risk management software provider offers the ability to reduce risk, increase efficiency, and improve organizational performance. Riskonnect Compliance is Risko
By SAI360
SAI360 Regulatory Compliance Manager is SAI360's software product, from SAI Global Compliance, Inc. Published at sai360.com/solutions/compliance-management/regulatory-compliance-ma
By Vanta
Vanta automates the complex and time-consuming process of SOC 2, HIPAA, ISO 27001, PCI, and GDPR compliance certification. Automate your security monitoring in weeks instead of mon
Products
Claimed products appear first. Ranking packs and payment do not change this list.
- Archer Evolv Compliance· Archer
- Holistic AI Governance Platform· Holistic AI
- IBM OpenPages· IBM
- LogicGate Controls Compliance· LogicGate
- MetricStream Compliance Management· MetricStream
- NAVEX One· NAVEX
- OneTrust Compliance Automation· OneTrust
- Riskonnect Compliance· Riskonnect
- SAI360 Regulatory Compliance Manager· SAI360
- Vanta· Vanta
Also used in this category
These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.
- AI governance advisory and free AI risk calculator· PolyGovernClaimed
- BABL AI Audit· BABL AI
- Credo AI Governance Platform· Credo AI
- FairNow AI Governance Platform· FairNow
Related categories
Relevant procurement and assurance guides
Frequently asked questions
What is Regulatory compliance?
Evidence and workflow against named AI or data laws and standards. Jobs: eu ai act style evidence; sector rule mapping; obligation tracking.
What should not be listed as Regulatory compliance?
Products whose buyer job is generic governance, policy-management CMSes, or audit services. Those belong on their own category page so search queries are not split.
Has AI Trustmark independently assessed every Regulatory compliance supplier?
No. A category listing is descriptive. Independent assessment is shown only on company or product pages that carry Trustmark evidence.
Is an AI governance questionnaire the same as independent verification?
No. Governance platforms help an organisation inventory systems and attest to policy. They do not replace independent testing of a production product. A completed questionnaire is operator documentation unless independently sampled.
What human oversight should buyers specify for consequential AI decisions?
Oversight is not a confirm button. Buyers should specify who can approve or stop an outcome, whether they have time and competence, what they see, and how that review is logged. Independent assessment records the oversight that was evidenced for the named scope.
What model or provider changes should a buyer insist on being told about?
Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.
How should buyers verify where AI customer data is processed?
Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.
Does a TrustMark on one product cover the rest of the company?
No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.