Compliance agents

AI agents and platforms that help achieve and maintain compliance frameworks such as SOC 2, ISO 27001, HIPAA and related audit programs.

Vanta

compliance soc2iso27001hipaa

Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.

Pricing: Quote-based. AWS Marketplace lists Essentials from $14,000/year for 1–20 employees (12-month contracts); modules priced …

Drata

compliance soc2iso27001hipaa

Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.

Pricing: Quote-based. AWS Marketplace Foundation Package listed at $15,000/year for 1–50 employees (third-party census of marketp…

Sprinto

compliance soc2iso27001hipaa

Autonomous compliance platform aimed at SaaS and growth-stage teams, with AI agents for mapping obligations, gathering evidence, and monitoring controls.

Pricing: AWS Marketplace: Starter Platform $7,500/year (up to 100 employees) plus first compliance framework from $2,000/year (co…

Scytale

compliance soc2iso27001hipaa

AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles.

Pricing: Quote-based packages (Build Starter, Build DFY, Build Stronger; Scale; Enterprise). Dollar amounts not published on the …

Comp AI

compliance soc2iso27001hipaa

Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.

Pricing: Quote-based (Startup / Mid-Market / Enterprise). Specific dollar amounts not published on the homepage at last check.

Secureframe

compliance soc2iso27001hipaa

Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.

Pricing: Quote-based. Public page lists Fundamentals / Complete / Defense feature packages without dollar amounts on the pricing …

Hyperproof

compliance soc2iso27001

AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.

Scrut Automation

compliance soc2iso27001hipaa

Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs.

Pricing: Public pricing page not available (404 at last check). Industry AWS Marketplace census has listed $15,000/year for up to…

Thoropass

compliance soc2iso27001hipaa

Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks.

Strike Graph

compliance soc2iso27001

Compliance platform with published product pricing pages for building and maintaining security certification programs.

Pricing: Published on vendor pricing page (see source); verify current tiers on strikegraph.com/pricing.

Zania

compliance soc2iso27001hipaa

Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.

Credo AI

compliance iso27001

AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.

AuditBoard

compliance soc2iso27001

Enterprise audit, risk and compliance platform used by large organizations for SOX, internal audit and connected risk workflows.

LogicGate Risk Cloud

risk soc2iso27001

AI GRC platform for enterprise risk and compliance program configuration, workflows and reporting.

OneTrust

risk dpdpiso27001soc2

Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.

BigID

risk dpdpiso27001hipaa

Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases.

Transcend

compliance dpdp

Data privacy infrastructure for DSRs, consent and data governance automation across systems.

Conveyor

security soc2iso27001

Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.

Pricing: Published outcome-based pricing on conveyor.com/pricing.

SafeBase

security soc2iso27001

Trust center and security questionnaire automation platform for customer security reviews.

ServiceNow Now Assist

business-ops soc2iso27001

Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules.

Optro

compliance soc2iso27001

GRC intelligence platform (newer entrant) focused on AI-assisted governance, risk and compliance workflows.