RegScale RegML AI agents (RegScale CCM)
Vendor: RegScale · HQ: United States · Category: Compliance · Risk
Last verified · Added · 6 sources · How we verify
Vendor? Get your “Listed on Agent Index” badge
What it does
RegScale's RegML engine drafts control implementations from existing policies and produces control-gap scorecards with recommendations; RegML Auditor evaluates controls on demand. In its FY26 update (May 13, 2026) RegScale said it 'launched RegML AI agents in production: continuously monitoring controls, automating evidence collection, and triggering remediation without human intervention'. It also said it would extend the agents into autonomous audit workflows and AI governance. RegML can also run on-premises. The use-case pages cover FedRAMP ATO acceleration and the path from CMMC scoping to certification, and RegScale says it earned CMMC Level 2 using its own platform. On the FedRAMP Marketplace, RegScale CCM (FR2414158717) has been FedRAMP Authorized at High since 2025-06-24. TX-RAMP Level 2 certified (TX1793477) on the Texas DIR list updated 13 Oct 2026.
Frameworks (vendor-stated)
Vendor-claimed FedRAMP, CMMC, NIST SP 800-53, NIST SP 800-171, ISO 27001, SOC 2
Government authorizations
Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.
| Program | Product | Status | Scope | Source |
|---|---|---|---|---|
| FedRAMP | RegScale CCM · FedRAMP Authorized · FR2414158717 · High · authorized 2025-06-24 | FedRAMP Authorized | listing | Registry |
| TX-RAMP | RegScale CCM · Level 2 · TX1793477 | Level 2 | listing | Registry |
Pricing (as published)
Not published
Tasks
control monitoringevidence collectionremediationgap analysisgovernment compliance
Sources
- regscale.com/ai-driven-compliance-automation-with-regml/ (primary)
- regscale.com/blog/regscale-tripled-revenue-as-the-ccm-category-arrives/
- regscale.readme.io/docs/ai-regml
- regscale.com/contact/
- fedramp.gov/marketplace/products/FR2414158717/
- dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.
Next step: find an auditor
After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.
Auditors by framework
Existing directory filters for frameworks this listing tags, shown only where at least three Verified firms are listed. A tag is vendor-stated relevance, not a certification.
Narrow by region
This listing’s HQ country is United States. That is a starting point only — choose any published country page.
United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates
Audit firms in India (131)
Audit firms in Japan (49)
Send a request Get matched with verified auditors All verified audit firms
Request received
Thanks, we've received your request. We'll be in touch before sharing it with any firm.
Reference:
Use-case comparisons
- US public-sector and FedRAMP AI agents — 25 verified listings (US government, FedRAMP and public-sector compliance or security operations)
Compare RegScale RegML AI agents (RegScale CCM) with
Alternatives
-
Secureframe — Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. (shared tags: FedRAMP, TX-RAMP, CMMC) -
Drata — Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs. (shared tags: FedRAMP, CMMC) -
IntelliGRC Evan and Alfie AI agents — CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized. (shared tags: FedRAMP, CMMC) -
Vanta — Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. (shared tags: FedRAMP, CMMC) -
Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. (shared tags: FedRAMP, TX-RAMP) - Agentforce for Public Sector — Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus. (shared tags: FedRAMP, TX-RAMP)
See all RegScale RegML AI agents alternatives →
FAQ (from this dataset)
What does RegScale RegML AI agents do?
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
How much does RegScale RegML AI agents cost?
Not published
Where is RegScale headquartered?
United States
Which frameworks does RegScale RegML AI agents support?
Frameworks (vendor-stated): FedRAMP, TX-RAMP, CMMC. Framework tags indicate relevance, not certification.
What are alternatives to RegScale RegML AI agents?
See the RegScale RegML AI agents alternatives page for category-sharing listings in relevance order, not a ranking. RegScale RegML AI agents alternatives.
Stay updated
Check your inbox to confirm your email. We’ll only send the weekly brief after you click the link.
We use your email only to send the newsletter. See our privacy policy.