Regulatory compliance companies, products & suppliers
Evidence and workflow against named AI or data laws and standards. Jobs: eu ai act style evidence; sector rule mapping; obligation tracking.
What is Regulatory compliance?
Evidence and workflow against named AI or data laws and standards. Jobs: eu ai act style evidence; sector rule mapping; obligation tracking.
What problems does it solve?
Legal needs artefacts mapped to a regulation, not another inventory.
Typical business use cases
- EU AI Act style evidence
- Sector rule mapping
- Obligation tracking
Important capabilities
- Regulation library
- Evidence binding
- Attestations
What buyers should evaluate
- Which regimes are actually modelled
- Lawyer workflow
- Export
Risks and governance considerations
A 'compliant' badge that is a checklist, not evidence.
Procurement checklist
- Regime list
- Evidence export
- Legal owner
Relevant AI Trustmark assurance
AI Trustmark independent findings appear only when an assessment or certificate exists. Category membership does not imply verification.
Companies and providers
Claimed suppliers appear first so buyers can start with listings the company has taken ownership of. Payment does not buy this order.
Archer publishes Archer Evolv Risk, Archer AI Governance, and Archer IRM as named AI products. Archer is used for AI risk management and Regulatory compliance work. Archer is recor
BABL AI publishes BABL AI Audit as named AI products. BABL AI is used for Regulatory compliance work. BABL AI is recorded in Coralville, United States. BABL AI publishes product in
Operationalize Trusted AI governance with Credo AI: discover AI, enforce policies, prove compliance, and manage risk across every model, agent, and application. Credo AI publishes
Optro’s AI Governance solution ensures compliance, manages risk, and drives responsible AI innovation at scale. FairNow publishes FairNow AI Governance Platform as named AI product
Holistic AI is the leading enterprise AI governance platform. One end-to-end tool to identify, protect, and enforce AI governance at scale. Holistic AI publishes Holistic AI Govern
International Business Machines Corporation sells hybrid-cloud software, Granite models and enterprise AI tooling. Public pages distinguish IBM software and models from IBM Consult
LogicGate Risk Cloud is the leading AI-powered GRC platform with 30+ applications for enterprise risk, third-party risk, cyber risk and compliance management. LogicGate publishes L
MetricStream provides Governance, Risk and Compliance (GRC) software solutions that allow companies across various industries to streamline and automate their enterprise-wide GRC p
NAVEX publishes NAVEX One PolicyTech and NAVEX One as named AI products. NAVEX is used for Regulatory compliance and Policy management work. NAVEX is recorded in United States. NAV
OneTrust helps companies manage privacy, consent, and AI governance while automating compliance and reducing risk to build trust and drive innovation. OneTrust, LLC trades as OneTr
The world’s largest risk management software provider offers the ability to reduce risk, increase efficiency, and improve organizational performance. Riskonnect publishes Riskonnec
SAI360 publishes SAI360 Regulatory Compliance Manager, SAI360 Policy Management, and SAI360 Enterprise & Operational Risk as named AI products. SAI360 is used for AI risk managemen
Vanta automates the complex and time-consuming process of SOC 2, HIPAA, ISO 27001, PCI, and GDPR compliance certification. Automate your security monitoring in weeks instead of mon
Products
Claimed products appear first. Ranking packs and payment do not change this list.
- Archer Evolv Compliance· Archer
- Holistic AI Governance Platform· Holistic AI
- IBM OpenPages· IBM
- LogicGate Controls Compliance· LogicGate
- MetricStream Compliance Management· MetricStream
- NAVEX One· NAVEX
- OneTrust Compliance Automation· OneTrust
- Riskonnect Compliance· Riskonnect
- SAI360 Regulatory Compliance Manager· SAI360
- Vanta· Vanta
Also used in this category
These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.
- BABL AI Audit· BABL AI
- Credo AI Governance Platform· Credo AI
- FairNow AI Governance Platform· FairNow
Related categories
Relevant procurement and assurance guides
Frequently asked questions
What is Regulatory compliance?
Evidence and workflow against named AI or data laws and standards. Jobs: eu ai act style evidence; sector rule mapping; obligation tracking.
What should not be listed as Regulatory compliance?
Products whose buyer job is generic governance, policy-management CMSes, or audit services. Those belong on their own category page so search queries are not split.
Has AI Trustmark independently assessed every Regulatory compliance supplier?
No. A category listing is descriptive. Independent assessment is shown only on company or product pages that carry Trustmark evidence.
Is an AI governance questionnaire the same as independent verification?
No. Governance platforms help an organisation inventory systems and attest to policy. They do not replace independent testing of a production product. A completed questionnaire is operator documentation unless independently sampled.
What human oversight should buyers specify for consequential AI decisions?
Oversight is not a confirm button. Buyers should specify who can approve or stop an outcome, whether they have time and competence, what they see, and how that review is logged. Independent assessment records the oversight that was evidenced for the named scope.
What model or provider changes should a buyer insist on being told about?
Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.
How should buyers verify where AI customer data is processed?
Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.
Does a TrustMark on one product cover the rest of the company?
No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.