Mindlapse Ernest (agentic Cyber-GRC: compliance, third-party and risk agents)
Vendor: Mindlapse (Mindlapse SAS) · HQ: France · Category: Compliance · Risk
Last verified · Added · 5 sources · How we verify
Vendor? Get your “Listed on Agent Index” badge
On this page
What it does
Mindlapse OS is a Paris-built 'agentic Cyber-GRC operating system' with modules for Risk Intelligence (continuous risk analysis from initiative to enterprise), Third-Party Risk Management (context-aware assessments with contradiction detection), Compliance (dozens of frameworks, controls tied to live evidence), board-ready reporting (Cyber Cockpit) and GRCOps (security actions tracked through a lifecycle to verified closure). Ernest is the agentic AI embedded in every module: it suggests what a team would otherwise write (likelihoods, scenarios, treatments, control mappings), scores what needs a number, and verifies governance claims such as 'MFA is enforced on all admin accounts' against uploaded or connected evidence, connector signals and the company's cyber knowledge graph. Planning, collection, adjudication and writing are separate agents with separate responsibilities; each verdict carries a confidence level and matched sources, is written to the audit trail and is re-checked continuously. Mindlapse says Ernest never decides alone: a human accepts or rejects every suggestion. It runs on sovereign open-source LLMs (Mistral) on EU-hosted infrastructure with no training on customer data. Regulations highlighted include NIS2, DORA, the Cyber Resilience Act and the EU AI Act. Pricing is by subscription and not published.
Frameworks (vendor-stated)
Vendor-claimed NIS2, DORA, EU Cyber Resilience Act, EU AI Act
Pricing (as published)
Not published
Tasks
control monitoringevidence collectioncontrol mappingvendor riskrisk assessment
Sources
- mindlapse.ai/platform/ernest/ (primary)
- mindlapse.ai/fr/plateforme/
- mindlapse.ai/
- mindlapse.ai/legal/legal-notice/
- mindlapse.ai/pricing/
Last verified 19 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.
Next step: find an auditor
After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.
Narrow by region
Published country pages in this directory. Choose any region; this listing has no mapped HQ country page.
United States · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates
Audit firms in India (131)
Audit firms in Japan (49)
Send a request Get matched with verified auditors All verified audit firms
Request received
Thanks, we've received your request. We'll be in touch before sharing it with any firm.
Reference:
Use-case comparisons
- TPRM and vendor-risk AI agents — 40 verified listings (Third-party risk, vendor assessments, security ratings and questionnaire automation)
Compare Mindlapse Ernest (agentic Cyber-GRC: compliance, third-party and risk agents) with
Alternatives
- 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: DORA)
-
Egerie Jerry (agentic Cyber GRC platform) — European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked. (shared tags: DORA) -
Fidureon compliance agents — EU-hosted compliance platform for European companies whose agents read documents and GitHub evidence, watch security advisories, flag gaps and propose actions, with per-agent autonomy set to Propose & Wait, Hybrid or Full. (shared tags: DORA) -
Hybridity compliance execution platform agents (policy-to-control registry, scheduled evidence and batch contract checks) — Swedish compliance execution platform for regulated firms that turns a company's own policies into a requirement registry, checks it against DORA, NIS 2, GDPR or customer demands, and hands routine work to agents (contracts checked in batches, evidence collected on schedule, updates computed when a rule changes), with a person approving every result. (shared tags: DORA) -
KaitoSec AI agents (agentic ISMS and GRC platform) — German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval. (shared tags: DORA) -
Kodex AI regulatory compliance agents — Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent. (shared tags: DORA)
See all Mindlapse Ernest alternatives →
FAQ (from this dataset)
What does Mindlapse Ernest do?
French agentic Cyber-GRC operating system whose Ernest engine runs separate planner, collector, adjudicator and writer agents to verify every governance claim (from policies, control owners or vendors) against evidence, connector signals and a cyber knowledge graph, returning sourced verdicts with confidence that are re-checked continuously and accepted or rejected by a human.
How much does Mindlapse Ernest cost?
Not published
Where is Mindlapse (Mindlapse SAS) headquartered?
France
Which frameworks does Mindlapse Ernest support?
Frameworks (vendor-stated): DORA. Framework tags indicate relevance, not certification.
What are alternatives to Mindlapse Ernest?
See the Mindlapse Ernest alternatives page for category-sharing listings in relevance order, not a ranking. Mindlapse Ernest alternatives.
Stay updated
Check your inbox to confirm your email. We’ll only send the weekly brief after you click the link.
We use your email only to send the newsletter. See our privacy policy.