Featured
Zania
compliance soc2iso27001hipaa
Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.
v0.1 · 32 agents seeded · open dataset
Which AI agent should you use for compliance, security, risk and ops?
Agent Index by Heritage Services is a citable directory of real AI agents and tools — with framework mapping for DPDP, CERT-In, SOC 2 and ISO 27001. Every fact links to a source. Empty fields mean we could not verify them yet.
32
Agents indexed (v0.1 seed)
4
Categories: compliance, security, risk, ops
4
Framework hubs live
Browse by category
Compliance
AI agents and platforms that help achieve and maintain compliance frameworks such as SOC 2, ISO 27001, HIPAA and related audit programs.
Security
AI agents for application, cloud and security operations — vulnerability management, detection, response and trust automation.
Risk
AI agents for enterprise, third-party, privacy and financial crime risk programs.
Business operations
AI agents that automate workplace, process and service operations for security and compliance teams' broader business context.
Framework hubs
DPDP Act (India)
India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Core notice, security, breach and retention duties larg…
CERT-In Directions (2022)
Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for…
SOC 2
AICPA System and Organization Controls 2 reports on security, availability, processing integrity, confidentiality and/or privacy trust services criteria — widel…
ISO/IEC 27001
International standard for information security management systems (ISMS), commonly required by global enterprise customers.…
Featured agents
Editorial picks for v0.1 — not paid unless labelled Sponsored.
Featured
Snyk
security soc2iso27001
Developer-first application security platform; Evo Agentic AppSec adds AI security agents that find, fix and verify vulnerabilities.
Pricing: Published plans on snyk.io/plans (Free / Team / Enterprise style tiers; verify current amounts on the plans page).
Sample of the index
AuditBoard
compliance soc2iso27001
Enterprise audit, risk and compliance platform used by large organizations for SOX, internal audit and connected risk workflows.
BigID
risk dpdpiso27001hipaa
Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases.
Comp AI
compliance soc2iso27001hipaa
Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.
Pricing: Quote-based (Startup / Mid-Market / Enterprise). Specific dollar amounts not published on the homepage at last check.
ComplyAdvantage
risk
AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions.
Conveyor
security soc2iso27001
Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.
Pricing: Published outcome-based pricing on conveyor.com/pricing.
Credo AI
compliance iso27001
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
CrowdStrike Charlotte AI
security
Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows.
Drata
compliance soc2iso27001hipaa
Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.
Pricing: Quote-based. AWS Marketplace Foundation Package listed at $15,000/year for 1–50 employees (third-party census of marketp…
Hyperproof
compliance soc2iso27001
AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.
Newsletter
Weekly brief on compliance AI agents, framework changes and vendor moves. Double opt-in. DPDP-ready notice.