Noru Agentic Compliance (GRC agents) alternatives
Noru Agentic Compliance (GRC agents) is listed under Compliance and tagged ISO 27001, SOC 2. These 131 agents share at least one category with it, ordered by number of shared framework tags, then category (a relevance order, not a ranking).
All category-sharing alternatives
| Agent | Category | Shared framework tags | Compare |
|---|---|---|---|
 6clicks Hailey AI Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs 6clicks Hailey AI |
 Akitra Andromeda AI compliance agents AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Akitra Andromeda AI compliance agents |
 Comp AI Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Comp AI |
 Complyance GRC AI Agents Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Complyance GRC AI Agents |
 Cypago Agentic Workflows Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Cypago Agentic Workflows |
 Drata Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Drata |
 Hyperproof AI-powered GRC platform for program management, evidence, audits and multi-framework compliance. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Hyperproof |
 IntelliGRC Evan and Alfie AI agents CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs IntelliGRC Evan and Alfie AI agents |
 Optro (formerly AuditBoard) AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Optro (formerly AuditBoard) |
 Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Rippling Automated Compliance |
 Scrut Automation Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Scrut Automation |
 Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Scytale |
 Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Secureframe |
 Sprinto Autonomous compliance platform aimed at SaaS and growth-stage teams, with AI agents for mapping obligations, gathering evidence, and monitoring controls. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Sprinto |
 Strike Graph Compliance platform with published product pricing pages for building and maintaining security certification programs. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Strike Graph |
| Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs SureCloud Gracie AI agents (virtual GRC team) |
 Thoropass Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Thoropass |
 Trustero AI (GRC agents) AI GRC platform whose agents collect and map evidence, test controls continuously, assess policies against frameworks, run natural-language 'TI Playbooks' and answer security questionnaires. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Trustero AI (GRC agents) |
 Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Vanta |
 Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | ISO 27001, SOC 2 | Noru Agentic Compliance (GRC agents) vs Zania |
| A Andesite Human-AI SOC (Azimuth for Government) Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. | Security | ISO 27001, SOC 2 | — |
 Appian Agent Studio (AI agents) Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized. | Business operations | ISO 27001, SOC 2 | — |
 Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | ISO 27001, SOC 2 | — |
 LogicGate Risk Cloud AI GRC platform for enterprise risk and compliance program configuration, workflows and reporting. | Risk | ISO 27001, SOC 2 | — |
 OneTrust Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight. | Risk | ISO 27001, SOC 2 | — |
 SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | ISO 27001, SOC 2 | — |
 SecurityScorecard Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Risk | ISO 27001, SOC 2 | — |
 ServiceNow Now Assist Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules. | Business operations | ISO 27001, SOC 2 | — |
 UpGuard Cyber risk and third-party risk management platform with published CRPM pricing page. | Risk | ISO 27001, SOC 2 | — |
 Wiz Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | Security | ISO 27001, SOC 2 | — |
 Anecdotes Agentic GRC (Agent Library and Agent Studio) Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM. | Compliance | ISO 27001 | Noru Agentic Compliance (GRC agents) vs Anecdotes Agentic GRC (Agent Library and Agent Studio) |
 Athereon LAiKA (AI agent for ISMS, risk and questionnaires) German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything. | Compliance | ISO 27001 | Noru Agentic Compliance (GRC agents) vs Athereon LAiKA (AI agent for ISMS, risk and questionnaires) |
 Credo AI AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs. | Compliance | ISO 27001 | Noru Agentic Compliance (GRC agents) vs Credo AI |
 Egerie Jerry (agentic Cyber GRC platform) European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked. | Compliance | ISO 27001 | Noru Agentic Compliance (GRC agents) vs Egerie Jerry (agentic Cyber GRC platform) |
 Fidureon compliance agents EU-hosted compliance platform for European companies whose agents read documents and GitHub evidence, watch security advisories, flag gaps and propose actions, with per-agent autonomy set to Propose & Wait, Hybrid or Full. | Compliance | ISO 27001 | Noru Agentic Compliance (GRC agents) vs Fidureon compliance agents |
 BigID Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases. | Risk | ISO 27001 | — |
 Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) |
 AuditFile Agentic AI Orchestrator Suite (audit agents) Multi-agent orchestration for financial-statement audits: an orchestrator staffs engagements with long-running agents that draft disclosure-checklist answers, categorise trial balances, generate PBC request lists, prepare and perform procedures and draft workpapers, all ending in a human sign-off queue. | Compliance | — | Noru Agentic Compliance (GRC agents) vs AuditFile Agentic AI Orchestrator Suite (audit agents) |
 Behavox Digital Employees (AI agents for compliance surveillance alert review) AI agents that close routine Level 1 communications and trade-surveillance alerts on their own, using three-model consensus (any disagreement escalates to a human), with a regulator-ready Bundle Log of every decision. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Behavox Digital Employees (AI agents for compliance surveillance alert review) |
 Caseware Verity agents (Disclosure Checklist and Risk Suggestion) Audit-engagement agents inside Caseware: the Disclosure Checklist Agent drafts cited Yes/No/N-A checklist responses from financial statements, and the Risk Suggestion Agent drafts engagement-specific risks for auditor review. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Caseware Verity agents (Disclosure Checklist and Risk Suggestion) |
 Cav Compliance OS agents (formerly Caveonix) Agentic cyber assurance and continuous compliance platform whose AI agents collect evidence, test controls, find gaps against 50+ frameworks (FISMA, NIST 800-53, FedRAMP, CMMC) and generate ATO artifacts; the platform is FedRAMP High authorized. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Cav Compliance OS agents (formerly Caveonix) |
 DataSnipper Alwin Agentic automation platform for audit and finance in which agents run end-to-end procedures over evidence and return traceable workpapers for human review and sign-off. | Compliance | — | Noru Agentic Compliance (GRC agents) vs DataSnipper Alwin |
 Deep Fathom Compliance Readiness Platform (agentic CMMC / NIST SP 800-171 readiness) CMMC and NIST SP 800-171 readiness platform for US defence contractors where AI agents interpret obligations, plan and advance routine readiness work, continuously map the CMMC boundary and collect evidence, with human review gates on consequential decisions. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Deep Fathom Compliance Readiness Platform (agentic CMMC / NIST SP 800-171 readiness) |
| Agent workforce for audit and advisory firms: agents plan engagements, run testing through to workpapers, review conclusions against evidence and draft financial statements, coordinated by Field Orchestrator. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Fieldguide Field Agents |
 Kodex AI regulatory compliance agents Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Kodex AI regulatory compliance agents |
 MineOS Mira AI Autonomous AI agents for privacy, vendor risk and AI governance: discovery, DSR fulfilment, cross-border transfer checks, assessment autofill and AI-agent posture profiles. | Compliance | — | Noru Agentic Compliance (GRC agents) vs MineOS Mira AI |
 Modulos AI governance agents (Scout, Risk Agent, Control Assessment Agent) AI governance platform whose agents discover AI systems, assess controls against evidence, quantify AI risk in euros and investigate changes on a schedule, while decisions on the record stay with your team. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Modulos AI governance agents (Scout, Risk Agent, Control Assessment Agent) |
 RegScale RegML AI agents (RegScale CCM) Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized. | Compliance | — | Noru Agentic Compliance (GRC agents) vs RegScale RegML AI agents (RegScale CCM) |
 Saidot Agent-first AI governance platform: a knowledge graph of AI risks, controls and policies, an Agent Catalogue, and MCP servers that let customers' agents draft risk assessments. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Saidot |
 Transcend Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Transcend |
 Workiva Agent Studio (finance, audit and GRC agents) No-code agent builder and prebuilt agents on Workiva's reporting, audit and GRC platform, used for finance tie-outs and roll-forwards and for evidence collection, control testing and remediation, with configurable review and approval steps. | Compliance | — | Noru Agentic Compliance (GRC agents) vs Workiva Agent Studio (finance, audit and GRC agents) |
 Abnormal AI Security Mailbox (Abnormal AI for Government) Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. | Security | — | — |
| Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus. | Business operations | — | — |
 AppZen AI agents (Autonomous AP, Expense Audit and AI Agent Studio) Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions. | Business operations | — | — |
 Avokaado Avo AI (governed contract agents) Contract lifecycle platform whose Avo AI turns each contract type into a governed agent (NDA, Vendor, Procurement and KYC Agents) that drafts, negotiates, approves and analyses within your playbooks, with every action scored and logged. | Business operations | — | — |
 Black Kite AI Agent Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. | Risk | — | — |
 Box AI Agents (Box Agent, Extract, Classification and custom agents; Box for Government) Permissions-aware AI agents on Box's content platform: the Box Agent plans multi-step work across files, Extract agents turn documents into structured metadata, a Classification agent labels sensitive content, and Box AI Studio builds custom agents; Box AI sits inside Box's FedRAMP High boundary per the Marketplace listing. | Business operations | — | — |
 Bretton AI agentic back-office platform (formerly Greenlite AI) Agent platform for bank and fintech financial-crime operations: pre-built and custom agents gather evidence, apply the institution's policy and draft full cases for EDD, monitoring alerts, sanctions, SAR drafting and KYB, with every action logged. | Risk | — | — |
| AML/KYC agents that resolve L1 and L2 screening alerts (sanctions, PEPs, adverse media) against the institution's own policies, plus transaction-monitoring and fraud-monitoring agents, with a documented rationale for every decision. | Risk | — | — |
 CloudSEK AI Agents Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows. | Security | — | — |
 Co-Brain Legal Agent (playbook contract review and redlining) German legal agent that detects contract type, jurisdiction and parties, applies the company's playbook to every clause, flags deviations with page-cited reasoning and produces playbook-compliant redlines in Word, Outlook and Teams. | Business operations | — | — |
 ComplyAdvantage AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions. | Risk | — | — |
 DataGrail Vera (AI privacy agent) AI privacy agent built into DataGrail's privacy platform that autofills privacy and AI-risk assessments, classifies cookies, detects AI risk, suggests processing activities and troubleshoots DSR integration errors, acting only with user approval. | Risk | — | — |
 Definely Enhance Agentic AI system inside Microsoft Word that plans contract drafting and review tasks and hands them to specialised agents, with lawyer oversight. | Business operations | — | — |
 Docusign Iris agents and Agent Studio (Intelligent Agreement Management) Agents in Docusign IAM that review agreements against company standards and playbooks, suggest edits, request approvals, monitor contracts for risks and obligations, and can be built as custom agents in Agent Studio and used as steps in Workflow Builder. | Business operations | — | — |
 Dotfile Autonomy (KYB/AML review agents) Specialised AI agents that pre-investigate KYB cases end to end (documents, UBOs, AML screening hits, online reputation), auto-approve routine cases under the customer's policy and escalate edge cases with a full audit trail. | Risk | — | — |
 Feedzai Farol AI Agent AI agent embedded in Feedzai's RiskOps Studio that analyses fraud rules, retrieves and summarises alert data for investigations, and drafts SAR narratives for investigator review. | Risk | — | — |
 Fenergo KYRA (Fen-AI agentic workforce) Governed agentic workforce on Fenergo's client lifecycle (CLM/KYC) platform: agents complete routine KYC steps, resolve routine screening hits, process documents and source client data, with humans approving outcomes. | Risk | — | — |
 First AML AI Screening Agent Search and review agents that run the AML screening lifecycle — finding matches, assessing them against the entity profile, and re-checking hits as cases age. | Risk | — | — |
 FIS AML Investigations Agent Governed AI agent for bank AML alert triage, case investigation and SAR narrative drafting, with analyst confirmation required before any case is closed, escalated or filed. | Risk | — | — |
 FlowForma Assure (AI agents for vendor risk assessment) Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed. | Risk | — | — |
 Halo AI Agents (service management with FedRAMP GRC module) ITSM/ESM platform (formerly HaloITSM) with AI agents: conversational agents for end users and fulfillers, and process agents (Dispatch, 1st Line Support, Major Incident, Knowledge, Change Management) that act on their own within role-based permissions. The platform, including a FedRAMP/CMMC GRC module, is FedRAMP 20x Moderate. | Business operations | — | — |
 Harvey Agents Purpose-built legal AI agents that split large legal tasks, work in parallel and return cited, review-ready output for law firms and in-house teams. | Business operations | — | — |
 Hawk AI agents (AML Investigative, CDD and Screening Agents) Agentic AI overlay for AML teams: agents that gather data, summarise cases, flag typologies, draft SAR narratives and triage screening hits, with a human in the loop. | Risk | — | — |
 Hummingbird AI Agents (Research and Review Agents) AI agents for financial-crime compliance: a Research Agent that gathers and synthesises subject evidence and a Review Agent that fills out case reviews per your procedures, on an agent orchestration platform with analyst approval. | Risk | — | — |
 Hypatos agentic GBS workforce (finance back-office agents) Teams of AI agents for finance shared services that capture, code, tax-validate and PO-match invoices, process order confirmations, delivery notes and dunning letters, and post validated results to the ERP with traceable reasoning. | Business operations | — | — |
 IBM watsonx Orchestrate (incl. watsonx Orchestrate for Government) IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate. | Business operations | — | — |
 IDfy AI Agents Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance. | Risk | — | — |
 IndiSec DPDPA compliance agents (Veda AI privacy analyst) India DPDP Act compliance platform where assessment, obligation, consent, notification and evidence agents (plus the Veda AI privacy analyst) run gap assessments, track obligations, draft notices and assemble evidence, with lawyers and the customer approving every gate. | Risk | — | — |
 Ironclad Agent and specialized contracting agents CLM platform with Ironclad Agent, a conversational front door that routes requests to specialized agents (Intake, Contract Review, Playbook, Renewal, Search, Analytics, Workflow Designer and others) working inside live contracting workflows with human-in-the-loop review. | Business operations | — | — |
 Juro AI Review Agentic contract review in Juro's contract platform that triages, reviews and redlines contracts (including counterparty paper in Word) against legal-team playbooks. | Business operations | — | — |
 Ketch Agent Network Agent layer behind Ketch's privacy platform that self-populates data maps, runs always-on gap analysis between regulations, your commitments and live systems, and proposes reviewable configuration changes, DPIAs and RoPA exports. | Risk | — | — |
 KnowBe4 AIDA (AI Defense Agents) Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes). | Security | — | — |
 Leah (formerly ContractPodAi) Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations. | Business operations | — | — |
 LEGALFLY agents (Review, Legal Radar and Agent Studio) Legal AI platform with contracting, research and compliance agents, plus an Agent Studio that runs whole legal workflows from intake to approval against the organisation's playbooks. | Business operations | — | — |
 LegalOn Agents Specialised AI agents for in-house legal teams that build review playbooks, handle intake requests, translate contracts and triage low-risk agreements, under attorney control. | Business operations | — | — |
 Legartis Legal Agent (agentic Legal AI Workspace) Swiss legal AI workspace whose Legal Agent triages incoming contracts, reviews them against company playbooks, routes deviations above set limits to the business, Legal or Finance, and takes contracts from template draft through approvals and negotiation to signature. | Business operations | — | — |
 Light agents (Internal Audit, Bill, Contract and Accrual Agents) Agentic ERP for multi-entity finance teams: executive agents (Bill, Contract, Accrual) do accounting work, audit agents check their output and instructions against written accounting and approval policies, and materiality-based approval controls decide what needs a controller or CFO. | Business operations | — | — |
 Luci AI Agent Explainable AI agent for financial-crime investigations that prepares cases, runs triage and supports SAR-oriented workflows while institutions keep governance decisions. | Risk | — | — |
 Luminance Agent Lumi and Autonomous Negotiation Legal AI platform whose agent (Agent Lumi) marks up contracts against company playbooks and triggers approvals; its Autonomous Negotiation can run AI-to-AI contract negotiations. | Business operations | — | — |
 Lumos Albus (identity governance agent) AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security | — | — |
 Medius autonomous AP (agentic AI and Supplier Conversations) Accounts payable platform that uses agentic AI to capture and code invoices, decide matches, routing and approvals, approve payments for trusted vendors, check for fraud (including AI-generated receipts) and answer supplier invoice and payment emails automatically. | Business operations | — | — |
 MindBridge AI Autonomous financial-oversight platform that analyses 100% of transactions to surface anomalies, control failures and fraud risk for finance and audit teams. | Risk | — | — |
 New Odyssey Pegasus Compliance Agent (DSAR agent) Packaged DSAR agent that handles intake, jurisdiction deadlines, identity checkpoints, discovery across connected HRIS/CRM/ticketing/file systems, third-party PII redaction and response drafting, with a person approving the release. | Risk | — | — |
 Numeric agentic subledgers (close and accounting agents) Close-management and accounting platform whose agents turn source records (leases, commission plans, card spend, payables) into subledgers, propose the accounting treatment for approval, build schedules and derive journal entries automatically. | Business operations | — | — |
 Oracle Nexus for financial crime investigations (Nexus Case Flow and Nexus Reach agents) Oracle's financial-crime case management with agentic AI that pre-investigates AML, fraud, sanctions and KYC cases unprompted, gathers evidence and entity context, runs adverse-media scans and drafts investigation narratives for human review. | Risk | — | — |
 osapiens Agent Factory (supplier and supply-chain compliance agents) Agent layer across the osapiens HUB that runs supplier onboarding, record validation, questionnaire pre-fill, supplier case management and risk-trend analysis for supply-chain due diligence (LkSG, CSDDD, EUDR and more), within customer-set guardrails. | Risk | — | — |
 Payhawk AI agents (Financial Controller, Procurement, Payments and more) Spend-management AI agents that enforce spend policy, collect and match receipts, chase approvals, code transactions for month-end close and handle procurement, travel and payment requests. | Business operations | — | — |
 Pega AI agents (Pega Cloud for Government) Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized. | Business operations | — | — |
 Privado Wren (AI privacy analyst agent) AI privacy agent that runs privacy assessments end to end: it monitors tools like Jira, CLM and procurement for new activity, triggers the right PIA/DPIA/TIA/RoPA, researches risk, populates assessments with evidence and routes approvals. | Risk | — | — |
 ProcessUnity TPRM AI Agents (Evidence Evaluator, Assessment Autofill) Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control. | Risk | — | — |
 ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate). | Security | — | — |
 Riskonnect AI Agent Library (Agentforce 360 for Riskonnect) Library of prebuilt risk and GRC agents on Salesforce Agentforce inside Riskonnect: risk-register signal, risk builder, regulatory mapping, policy impact and horizon-monitoring agents, plus claims and incident intake/audit agents. | Risk | — | — |
 SAFE TPRM AI Co-Worker Agentic third-party risk management: a swarm of 100+ specialised agents runs the vendor lifecycle from intake and due diligence through remediation, continuous monitoring and offboarding. | Risk | — | — |
 Sardine agentic fraud and AML ops agents Fraud and AML platform with named agents that disposition screening alerts, run enhanced due diligence and business verification, analyse networks, draft SAR narratives, tune monitoring rules and build dispute packages. | Risk | — | — |
 SentinelOne Purple AI (agentic AI security analyst) Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized. | Security | — | — |
 Shufti Transaction Trust Monitoring (agentic FRAML engine) Agentic fraud and AML (FRAML) transaction monitoring in which governed AI agents score transactions, triage and investigate alerts and draft regulator-format SAR/STR reports, with the MLRO approving every filing. | Risk | — | — |
 Signzy Agentic CKYC Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening. | Risk | — | — |
 Silent Eight Iris 7 AI Agents Policy-bound AI agents that adjudicate sanctions, PEP, adverse-media, transaction-monitoring, CDD, trade and fraud alerts on top of a bank's existing screening and monitoring systems. | Risk | — | — |
 spektr AI agents (Case AI, KYB AI and compliance agents) Compliance platform for onboarding, monitoring and case work where AI agents run sanctions, PEP, adverse-media and alert investigations, resolve ownership (UBO) gaps and review documents, returning a cited verdict and recommended action for an analyst to decide. | Risk | — | — |
 Sphinx AI compliance analysts (KYC, KYB and AML agents) AI analyst agents for financial-crime compliance that run KYC and KYB onboarding reviews, disposition sanctions, PEP and adverse-media alerts, perform enhanced due diligence and rescreenings, and draft SAR/UAR filings with audit-ready decision logs. | Risk | — | — |
 SpotDraft Sidebar AI agents and VerifAI AI agents in SpotDraft's contract platform for contract review, contract queries, clause drafting and regulatory tracking, plus VerifAI playbook review inside Microsoft Word. | Business operations | — | — |
 SymphonyAI SRI Agents (Symphony Risk Intelligence) Financial-crime agents on SymphonyAI's agent-native Symphony Risk Intelligence platform: manager and specialist agents that prepare TM and screening investigations, enrich watchlist records, track threat and regulatory intelligence, and run KYC/EDD workflows. | Risk | — | — |
 Taktile AI agents (onboarding, sanctions and adverse-media agents) Agentic decision platform for banks and insurers with a library of pre-built agents, including Adverse Media Investigation, Business Ownership Intelligence and Sanctions and Watchlist Match Review agents, that run inside decision flows with human review. | Risk | — | — |
 Tenable One (Hexa AI) Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows. | Security | — | — |
 Themis AI Investigator (AML/KYB due-diligence agents) A coordinated team of AML-trained AI agents that runs enhanced due-diligence and KYB investigations in minutes: registry and web collection, officer/UBO screening, adverse-media analysis and transparent red/amber/green risk grading, with analysts keeping the final decision. | Risk | — | — |
 Tookitaki FinCense APAC AML and fraud platform that combines community typologies with purpose-built AI agents for detection, screening, customer risk and investigation. | Risk | — | — |
 TrustCloud TrustLens (agentic third-party risk assessments) Agentic third-party cyber risk assessments that scope each vendor by inherent risk, analyse outside-in ratings, inside-out control evidence and vendor artifacts, and produce cited risk summaries with continuous drift monitoring. | Risk | — | — |
 Unique AI financial agents (KYC, due diligence and research agents) Agentic AI platform for banks, asset and wealth managers with prebuilt financial agents for KYC, due diligence, RFP analysis and research, plus custom agents with governed tool and data access and audit logs. | Business operations | — | — |
 Unit21 AI Agents for fraud and AML AI agents that run fraud and AML alert triage and investigations: they pull transaction history, check watchlists, run open-source research, assemble evidence, draft narratives and recommend dispositions for analyst approval. | Risk | — | — |
 Veeam PrivacyOps AI agents (Consent Agent, DSR and Assessment agents) Privacy-operations agents on Veeam's DataAI Command Platform: a generally available Consent Agent that builds, tests, monitors and auto-remediates consent across sites and downstream systems, plus announced DSR intake-form and assessment-autofill agents. | Risk | — | — |
 VISO TRUST AI Agent (agentic third-party risk management) TPRM agent that launches due diligence as soon as a vendor is added, requests and renews SOC 2, ISO and pen-test artifacts, sends focused follow-ups, monitors breach advisories and drafts impact reports, escalating only exceptions to the team. | Risk | — | — |
 Vivox AI compliance agents (Rachel, AI compliance analyst) Pre-trained AI agents for AML, KYB/KYC and financial crime that take on Level 1 analyst work: sanctions and PEP alert reviews, adverse media monitoring, corporate registry and UBO analysis, and narrative report writing. | Risk | — | — |
 Whistic Automation Orchestrator (agentic assessments) Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval. | Risk | — | — |
 Wolfia Questionnaire Agent (security questionnaires and trust center) Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension. | Security | — | — |
 Wordsmith AI legal agents AI agents for in-house legal teams that take inbound requests in Slack, Teams or email, apply the team's playbooks and return ready-to-send work, escalating non-standard matters with reasoning. | Business operations | — | — |
 WorkFusion AI Agents (Evelyn, Tara, Evan, Isaac, Edward, Kayla) Named AI agents that act as L1/L2 AML analysts: they review and disposition sanctions, PEP and watchlist alerts, transaction screening and monitoring alerts, adverse media, EDD and KYC work, escalating or closing cases with justification. | Risk | — | — |
 Xelix AP control centre (agentic AP: statements, transactions and helpdesk agents) UK accounts-payable control software that bolts onto ERPs and uses 20+ autonomous AI agents to catch duplicate payments, overpayments and invoice fraud before the pay-run, reconcile supplier statements and answer vendor queries. | Business operations | — | — |
 Zenoo AI investigation agents (Screening Resolver, Case Narrator and others) Ten specialised AML investigation agents that screen, research, analyse and validate each onboarding or transaction alert, write a cited case narrative and hand the decision to a human analyst; a Red Team Agent challenges every finding. | Risk | — | — |
 Zip risk agents (Risk Orchestration and procurement Superagents) Procurement-embedded third-party risk agents that screen and score vendors, fast-track low-risk ones, route high-risk ones for deeper review, analyse surveys and documents for key risks, and schedule re-assessments by risk tier. | Risk | — | — |
 Zoven AI Bengaluru-built fraud, AML and KYC/KYB platform where AI agents run investigation SOPs case by case and draft cited verdicts for analysts to decide. | Risk | — | — |
Order is mechanical (shared dataset tags, then same primary category) — a relevance order, not a ranking or quality judgement. Framework tags indicate relevance, not certification.