Agent Index by Heritage Services
Submit / Claim
Home / Agents / episki Autonomous GRC (AI Orchestration agents for policies, questionnaires, vendors and evidence)

episki Autonomous GRC (AI Orchestration agents for policies, questionnaires, vendors and evidence)

Vendor: episki (episki, llc) · HQ: United States · Category: Compliance · Risk

Last verified · Added · 5 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

episki calls itself an 'Autonomous GRC' platform for SOC 2, ISO 27001, PCI DSS, CMMC and other frameworks. Its AI Orchestration layer runs agents with a skills catalogue: draft policy, answer questionnaire, map controls, collect evidence, review vendor (read incoming SOC 2 reports and CAIQ responses and score posture) and assess risk. Per episki's AI page, an agent takes a request from chat, a workflow trigger or a webhook and proposes a plan. It then runs discrete, logged step-runs that call native integrations or allow-listed MCP servers, and routes sensitive actions to human approval under hard 'safety floors'. Evidence collection is deterministic: the agent drafts an evidence 'recipe', a human approves it, and it then runs on a schedule without a model in the loop. Agents propose fixes when a recipe breaks. In the product preview, agents request decisions such as raising a vendor's tier, closing a finding or accepting a risk. The Trust module ingests buyers' questionnaires and has agents draft answers from the evidence store for review. The AI Governance module adds an agent and use-case registry mapped to ISO 42001, NIST AI RMF and the EU AI Act. A free trial is offered.

Frameworks (vendor-stated)

No framework tags yet.

Vendor-claimed SOC 2, ISO 27001, PCI DSS, CMMC, HIPAA, ISO 42001, NIST AI RMF, EU AI Act

Pricing (as published)

Published on episki.com/pricing: Compliance Platform $7,500/year (required base); modules Risk Management +$4,800/year, Third-Party Risk Management +$6,000/year, Trust +$7,200/year, AI Governance +$6,000/year; EU/Canada data residency +$6,000/year; shared AI token pool with overage at $0.50 per 1K tokens. Users, frameworks and vendors unlimited.

Tasks

policy managementquestionnaire automationvendor riskevidence collectioncontrol mappingrisk assessmenttrust center

Sources

  1. episki.com/product/ai (primary)
  2. episki.com/
  3. episki.com/product/trust
  4. episki.com/pricing
  5. episki.com/terms

Last verified 19 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Narrow by region

This listing’s HQ country is United States. That is a starting point only — choose any published country page.

United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Audit firms in the United States (195)

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

Compare episki Autonomous GRC (AI Orchestration agents for policies, questionnaires, vendors and evidence) with

Alternatives

  • 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform.
  • Akitra Andromeda AI compliance agents — AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer.
  • Anecdotes Agentic GRC (Agent Library and Agent Studio) — Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.
  • Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) — Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified.
  • Athereon LAiKA (AI agent for ISMS, risk and questionnaires) — German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything.
  • AuditFile Agentic AI Orchestrator Suite (audit agents) — Multi-agent orchestration for financial-statement audits: an orchestrator staffs engagements with long-running agents that draft disclosure-checklist answers, categorise trial balances, generate PBC request lists, prepare and perform procedures and draft workpapers, all ending in a human sign-off queue.

See all episki Autonomous GRC alternatives →

FAQ (from this dataset)

What does episki Autonomous GRC do?

A GRC platform built around agents that draft policies, answer inbound security questionnaires, review vendors' SOC 2 and CAIQ responses, map controls, assess risks and write deterministic evidence-collection recipes. Every plan, step-run and sensitive action goes through human approvals and safety floors. Pricing is published.

How much does episki Autonomous GRC cost?

Published on episki.com/pricing: Compliance Platform $7,500/year (required base); modules Risk Management +$4,800/year, Third-Party Risk Management +$6,000/year, Trust +$7,200/year, AI Governance +$6,000/year; EU/Canada data residency +$6,000/year; shared AI token pool with overage at $0.50 per 1K tokens. Users, frameworks and vendors unlimited.

Where is episki (episki, llc) headquartered?

United States

What are alternatives to episki Autonomous GRC?

See the episki Autonomous GRC alternatives page for category-sharing listings in relevance order, not a ranking. episki Autonomous GRC alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.