Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.
North America
Vendors headquartered in the United States or Canada.
28 listings · HQ country as published by each vendor · Open in directory filters
Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.
Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.
Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.
Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks.
Compliance platform with published product pricing pages for building and maintaining security certification programs.
Featured
Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
AI GRC platform for enterprise risk and compliance program configuration, workflows and reporting.
Featured
Developer-first application security platform; Evo Agentic AppSec adds AI security agents that find, fix and verify vulnerabilities.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows.
Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.
Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases.
Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do.
Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation.
Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.
Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata).
Enterprise AI assistant platform that automates employee support and business operations workflows across IT, HR and related systems.
Enterprise automation platform with Autopilot and agentic automation for business operations and process orchestration.
Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Governed AI agent for bank AML alert triage, case investigation and SAR narrative drafting, with analyst confirmation required before any case is closed, escalated or filed.
Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers.
Autonomous financial-oversight platform that analyses 100% of transactions to surface anomalies, control failures and fraud risk for finance and audit teams.