Thoropass alternatives: compliance automation and audit tools compared
Quick answer
Thoropass alternatives (2026): 26 other compliance-automation listings that share the Compliance category, a SOC 2 or ISO 27001 tag, and an evidence or control task in Agent Index dataset v0.1.27 (generated 2026-10-27).
The curated table is alphabetical, a relevance grouping from dataset tags, not a ranking or quality judgement.
Thoropass is listed under Compliance and tagged SOC 2, ISO 27001, HIPAA. Facts come from vendor pages and official registries.
Thoropass is listed under Compliance and tagged SOC 2, ISO 27001, HIPAA. These 147 agents share at least one category with it, ordered by number of shared framework tags, then category (a relevance order, not a ranking).
Compliance-automation alternatives to Thoropass
Listings with category Compliance, a SOC 2 or ISO 27001 framework tag, and at least one of evidence collection, control monitoring, control mapping or gap analysis (26 besides Thoropass). Alphabetical, not a ranking. Facts come from vendor pages and official registries; confirm with each vendor.
Headquartered in India, Asia-Pacific or Australia/NZ
4 of the compliance-automation alternatives above publish an HQ in India, Asia-Pacific or Australia/NZ (from each vendor’s own pages).
- 6clicks Hailey AI — Australia
- Scrut Automation — India
- Sprinto — India
- VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) — Singapore
Alternatives with a government authorization
FedRAMP, GovRAMP or TX-RAMP records whose certified product is the listed product or the government boundary the listing already documents (scope “listing”). Platform-only records are omitted here and appear on the GovRAMP and TX-RAMP hubs.
| Agent | Program | Product | Status | Id | Source |
|---|---|---|---|---|---|
 Anecdotes Agentic GRC (Agent Library and Agent Studio) | FedRAMP | Anecdotes | FedRAMP Authorized · 20x Moderate | FR2620235600 | Registry |
 Drata | FedRAMP | Drata Trust Management Platform | FedRAMP Authorized · 20x Low | FR2600167032 | Registry |
 IntelliGRC Evan and Alfie AI agents | FedRAMP | IntelliGRC | FedRAMP Authorized · 20x Low | FR2605341343 | Registry |
 Secureframe | FedRAMP | Secureframe Platform | FedRAMP Authorized · 20x Moderate | FR2529360449 | Registry |
| Secureframe | TX-RAMP | Secureframe Comply | Level 1 | TX1643526 | Registry |
 Vanta | FedRAMP | Vanta Trust Management Platform | FedRAMP Authorized · 20x Low | FR2525556241 | Registry |
| Vanta | FedRAMP | Vanta Government Cloud | FedRAMP Authorized · 20x Moderate | FR2525556241XM | Registry |
FAQ (from this dataset)
Which Thoropass alternatives publish pricing?
Akitra Andromeda AI compliance agents: Not published Anecdotes Agentic GRC (Agent Library and Agent Studio): Not published Athereon LAiKA (AI agent for ISMS, risk and questionnaires): Not published CITSmart GRC.S (GRC + SecOps platform with AI agents that check deadlines and execute response actions): Not published Comp AI: Quote-based (Startup / Mid-Market / Enterprise). Specific dollar amounts not published on the homepage at last check. Complyance GRC AI Agents: Not published Cypago Agentic Workflows: Not published Drata: Quote-based. AWS Marketplace Foundation Package listed at $15,000/year for 1–50 employees (third-party census of marketplace listing). Drata says Agentic TPRM is not priced by vendor count: every vendor gets a free inherent-risk assessment and customers pay only when a vendor needs a full security review (amounts not published). Egerie Jerry (agentic Cyber GRC platform): Not published Fidureon compliance agents: Essentials from SEK 7,495/month excluding VAT (up to 3 frameworks); Enterprise on request; free ISO 27001 readiness check; partner pricing for consultancies (fidureon.com/pricing). AI agents included on every plan. IntelliGRC Evan and Alfie AI agents: Not published KaitoSec AI agents (agentic ISMS and GRC platform): Not published Noru Agentic Compliance (GRC agents): Not published Scrut Automation: Public pricing page not available (404 at last check). Industry AWS Marketplace census has listed $15,000/year for up to 20 employees — treat as secondary pending vendor confirmation. Scytale: Quote-based packages (Build Starter, Build DFY, Build Stronger; Scale; Enterprise). Dollar amounts not published on the public pricing page. Secureframe: Quote-based. Public page lists Fundamentals / Complete / Defense feature packages without dollar amounts on the pricing page at last check. Sprinto: AWS Marketplace: Starter Platform $7,500/year (up to 100 employees) plus first compliance framework from $2,000/year (combined entry often cited as $9,500/year). Strike Graph: Published on vendor pricing page (see source); verify current tiers on strikegraph.com/pricing. SureCloud Gracie AI agents (virtual GRC team): Not published Trustero AI (GRC agents): Not published Vanta: Quote-based. AWS Marketplace lists Essentials from $14,000/year for 1–20 employees (12-month contracts); modules priced separately. VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents): Not published Remaining compliance-automation alternatives in this section do not publish a dollar figure on a public page we checked.
Which Thoropass alternatives are FedRAMP authorized?
Anecdotes Agentic GRC (Agent Library and Agent Studio) (Anecdotes · FedRAMP Authorized · FR2620235600 · 20x Moderate · authorized 2026-06-23) Drata (Drata Trust Management Platform · FedRAMP Authorized · FR2600167032 · 20x Low · authorized 2025-12-05) IntelliGRC Evan and Alfie AI agents (IntelliGRC · FedRAMP Authorized · FR2605341343 · 20x Low · authorized 2025-12-05) Secureframe (Secureframe Platform · FedRAMP Authorized · FR2529360449 · 20x Moderate · authorized 2026-06-23) Vanta (Vanta Trust Management Platform · FedRAMP Authorized · FR2525556241 · 20x Low · authorized 2025-07-25; Vanta Government Cloud · FedRAMP Authorized · FR2525556241XM · 20x Moderate · authorized 2026-04-24)
Which Thoropass alternatives are headquartered outside the US?
6clicks Hailey AI (Australia), Anecdotes Agentic GRC (Agent Library and Agent Studio) (Israel), Athereon LAiKA (AI agent for ISMS, risk and questionnaires) (Germany), CITSmart GRC.S (GRC + SecOps platform with AI agents that check deadlines and execute response actions) (Brazil), Complyance GRC AI Agents (United Kingdom), Cypago Agentic Workflows (Israel), Egerie Jerry (agentic Cyber GRC platform) (France), Fidureon compliance agents (Sweden), KaitoSec AI agents (agentic ISMS and GRC platform) (Germany), Noru Agentic Compliance (GRC agents) (Sweden), Scrut Automation (India), Scytale (Israel), Sprinto (India), SureCloud Gracie AI agents (virtual GRC team) (United Kingdom), VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) (Singapore).
Which Thoropass alternatives have a government authorization?
5 listings in this compliance-automation set have a FedRAMP, GovRAMP or TX-RAMP record whose certified product is the listed product or the government boundary the listing already documents. See the table below; confirm current status on each registry.
Which Thoropass alternatives are headquartered in India, Asia-Pacific or Australia/NZ?
6clicks Hailey AI (Australia), Scrut Automation (India), Sprinto (India), VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) (Singapore).
Does Thoropass bundle audits?
Thoropass’s listing describes a compliance platform that combines software with audit delivery pathways and partner/affiliated audit pathways. Confirm current audit delivery with the vendor. See also the Vanta and Drata audit partners guide. Vanta and Drata audit partners.
Is there a Thoropass vs Vanta comparison?
Yes. See the Thoropass vs Vanta pair page and the Vanta and Drata audit partners guide. Thoropass vs Vanta · Vanta and Drata audit partners.
All category-sharing alternatives
| Agent | Category | Shared frameworks (vendor-stated) | Pair page | Add |
|---|---|---|---|---|
 6clicks Hailey AI Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs 6clicks Hailey AI | |
 Akitra Andromeda AI compliance agents AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Akitra Andromeda AI compliance agents | |
 Comp AI Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Comp AI | |
 Complyance GRC AI Agents Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Complyance GRC AI Agents | |
 Cypago Agentic Workflows Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Cypago Agentic Workflows | |
| Drata Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Drata | |
 Hyperproof AI-powered GRC platform for program management, evidence, audits and multi-framework compliance. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Hyperproof | |
 Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Rippling Automated Compliance | |
 Scrut Automation Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Scrut Automation | |
 Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Scytale | |
| Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Secureframe | |
 Sprinto Autonomous Trust Platform with governed AI agents that detect change across systems, vendors, access and AI use, then refresh evidence, run vendor due diligence, prepare audits and close control gaps, with humans approving material decisions. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Sprinto | |
 Strike Graph Compliance platform with published product pricing pages for building and maintaining security certification programs. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Strike Graph | |
 Trustero AI (GRC agents) AI GRC platform whose agents collect and map evidence, test controls continuously, assess policies against frameworks, run natural-language 'TI Playbooks' and answer security questionnaires. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Trustero AI | |
| Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Vanta | |
 VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs VibrantiX agentic compliance platform | |
 Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | SOC 2, ISO 27001, HIPAA | Thoropass vs Zania | |
| A Andesite Human-AI SOC (Azimuth for Government) Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. | Security | SOC 2, ISO 27001, HIPAA | — | |
 Appian Agent Studio (AI agents) Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized. | Business operations | SOC 2, ISO 27001, HIPAA | — | |
 LogicGate Risk Cloud AI GRC platform (Risk Cloud) with GRC Agents that act under human supervision for third-party risk, AI governance, enterprise risk and business continuity. | Risk | SOC 2, ISO 27001, HIPAA | — | |
| Anecdotes Agentic GRC (Agent Library and Agent Studio) Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM. | Compliance | ISO 27001, HIPAA | Thoropass vs Anecdotes Agentic GRC | |
 CITSmart GRC.S (GRC + SecOps platform with AI agents that check deadlines and execute response actions) Brazilian GRC-plus-security-operations platform from Central IT: alerts from proxy, DNS, XDR, e-mail and identity tools are correlated and prioritised by AI, AI agents check deadlines, priorities and owners for each compliance or security demand, and AI agents execute checks and response actions in the environment (Cognitive Workflow), with LGPD, ISO 27001, NIST, CIS Controls 8 and ISO 42001 mapped out of the box. | Compliance | ISO 27001, HIPAA | Thoropass vs CITSmart GRC.S | |
| IntelliGRC Evan and Alfie AI agents CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized. | Compliance | SOC 2, ISO 27001 | Thoropass vs IntelliGRC Evan and Alfie AI agents | |
 Noru Agentic Compliance (GRC agents) EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept. | Compliance | SOC 2, ISO 27001 | Thoropass vs Noru Agentic Compliance | |
 Optro (formerly AuditBoard) AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance. | Compliance | SOC 2, ISO 27001 | Thoropass vs Optro | |
| Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions. | Compliance | SOC 2, ISO 27001 | Thoropass vs SureCloud Gracie AI agents | |
 BigID (incl. AgentIQ agents) Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests. | Risk | ISO 27001, HIPAA | — | |
 Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | SOC 2, ISO 27001 | — | |
 OneTrust Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight. | Risk | SOC 2, ISO 27001 | — | |
 SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | SOC 2, ISO 27001 | — | |
 Athereon LAiKA (AI agent for ISMS, risk and questionnaires) German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything. | Compliance | ISO 27001 | Thoropass vs Athereon LAiKA | |
 Credo AI AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs. | Compliance | ISO 27001 | Thoropass vs Credo AI | |
 Egerie Jerry (agentic Cyber GRC platform) European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked. | Compliance | ISO 27001 | Thoropass vs Egerie Jerry | |
 Fidureon compliance agents EU-hosted compliance platform for European companies whose agents read documents and GitHub evidence, watch security advisories, flag gaps and propose actions, with per-agent autonomy set to Propose & Wait, Hybrid or Full. | Compliance | ISO 27001 | Thoropass vs Fidureon compliance agents | |
 KaitoSec AI agents (agentic ISMS and GRC platform) German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval. | Compliance | ISO 27001 | Thoropass vs KaitoSec AI agents | |
 Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified. | Compliance | — | Thoropass vs Archer Evolv AI Operators | |
 AuditFile Agentic AI Orchestrator Suite (audit agents) Multi-agent orchestration for financial-statement audits: an orchestrator staffs engagements with long-running agents that draft disclosure-checklist answers, categorise trial balances, generate PBC request lists, prepare and perform procedures and draft workpapers, all ending in a human sign-off queue. | Compliance | — | Thoropass vs AuditFile Agentic AI Orchestrator Suite | |
 Behavox Digital Employees (AI agents for compliance surveillance alert review) AI agents that close routine Level 1 communications and trade-surveillance alerts on their own, using three-model consensus (any disagreement escalates to a human), with a regulator-ready Bundle Log of every decision. | Compliance | — | Thoropass vs Behavox Digital Employees | |
 Caseware Verity agents (Disclosure Checklist and Risk Suggestion) Audit-engagement agents inside Caseware: the Disclosure Checklist Agent drafts cited Yes/No/N-A checklist responses from financial statements, and the Risk Suggestion Agent drafts engagement-specific risks for auditor review. | Compliance | — | Thoropass vs Caseware Verity agents | |
 Cav Compliance OS agents (formerly Caveonix) Agentic cyber assurance and continuous compliance platform whose AI agents collect evidence, test controls, find gaps against 50+ frameworks (FISMA, NIST 800-53, FedRAMP, CMMC) and generate ATO artifacts; the platform is FedRAMP High authorized. | Compliance | — | Thoropass vs Cav Compliance OS agents | |
 Cortea Audit Quality Agents (AI agents for external audit file review, sample testing and disclosure checks) Berlin-based AI quality layer for audit firms. Its agents review audit files end to end, cross-checking figures, disclosures and assertions across financial statements, audit reports and working papers, run substantive sample testing against the auditor's criteria and work through IFRS/UK GAAP/Companies Act disclosure checklists, documenting findings for auditor and partner sign-off. | Compliance | — | Thoropass vs Cortea Audit Quality Agents | |
 DataSnipper Alwin Agentic automation platform for audit and finance in which agents run end-to-end procedures over evidence and return traceable workpapers for human review and sign-off. | Compliance | — | Thoropass vs DataSnipper Alwin | |
 Deep Fathom Compliance Readiness Platform (agentic CMMC / NIST SP 800-171 readiness) CMMC and NIST SP 800-171 readiness platform for US defence contractors where AI agents interpret obligations, plan and advance routine readiness work, continuously map the CMMC boundary and collect evidence, with human review gates on consequential decisions. | Compliance | — | Thoropass vs Deep Fathom Compliance Readiness Platform | |
 episki Autonomous GRC (AI Orchestration agents for policies, questionnaires, vendors and evidence) A GRC platform built around agents that draft policies, answer inbound security questionnaires, review vendors' SOC 2 and CAIQ responses, map controls, assess risks and write deterministic evidence-collection recipes. Every plan, step-run and sensitive action goes through human approvals and safety floors. Pricing is published. | Compliance | — | Thoropass vs episki Autonomous GRC | |
| Agent workforce for audit and advisory firms: agents plan engagements, run testing through to workpapers, review conclusions against evidence and draft financial statements, coordinated by Field Orchestrator. | Compliance | — | Thoropass vs Fieldguide Field Agents | |
 GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents) Berlin agentic compliance platform in which six AI agents run recurring ISO 27001, SOC 2, NIS2, TISAX and DORA work on a schedule: planning a first certification, weekly gap audits against connected systems, drafting policies, collecting evidence, drafting security-questionnaire answers and checking vendor contracts and DPAs, with every result logged and approved by a person. | Compliance | — | Thoropass vs GetTeddy compliance agents | |
 Hybridity compliance execution platform agents (policy-to-control registry, scheduled evidence and batch contract checks) Swedish compliance execution platform for regulated firms that turns a company's own policies into a requirement registry, checks it against DORA, NIS 2, GDPR or customer demands, and hands routine work to agents (contracts checked in batches, evidence collected on schedule, updates computed when a rule changes), with a person approving every result. | Compliance | — | Thoropass vs Hybridity compliance execution platform agents | |
 Kodex AI regulatory compliance agents Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent. | Compliance | — | Thoropass vs Kodex AI regulatory compliance agents | |
 Mindlapse Ernest (agentic Cyber-GRC: compliance, third-party and risk agents) French agentic Cyber-GRC operating system whose Ernest engine runs separate planner, collector, adjudicator and writer agents to verify every governance claim (from policies, control owners or vendors) against evidence, connector signals and a cyber knowledge graph, returning sourced verdicts with confidence that are re-checked continuously and accepted or rejected by a human. | Compliance | — | Thoropass vs Mindlapse Ernest | |
 MineOS Mira AI Autonomous AI agents for privacy, vendor risk and AI governance: discovery, DSR fulfilment, cross-border transfer checks, assessment autofill and AI-agent posture profiles. | Compliance | — | Thoropass vs MineOS Mira AI | |
 Modulos AI governance agents (Scout, Risk Agent, Control Assessment Agent) AI governance platform whose agents discover AI systems, assess controls against evidence, quantify AI risk in euros and investigate changes on a schedule, while decisions on the record stay with your team. | Compliance | — | Thoropass vs Modulos AI governance agents | |
 noze DataGovern (on-premise compliance agents for NIS2, GDPR and the AI Act) Italian on-premise platform whose AI agents read company documents and procedures, map them to NIS2, GDPR, AI Act, CRA and DORA obligations, flag gaps and risks with the source linked, and pre-fill registers, evidence and one remediation plan; a person approves every proposal and each confirmed gap becomes an owned task. | Compliance | — | Thoropass vs noze DataGovern | |
| AI agent inside the Nuix Neo investigative analytics platform for legal, regulatory, investigations and compliance-monitoring matters: it picks and calls Neo tools on its own to answer plain-language questions across a case, links every answer to source items, tags items and writes findings back to the case, and records each step for audit. | Compliance | — | Thoropass vs Nuix Neo AI Agent | |
 OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI) Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review. | Compliance | — | Thoropass vs OnFinance AI Maxwell | |
 RegASK AI agents (regulatory intelligence and action workflows) Singapore-based RegASK monitors regulatory change in 160+ markets for life sciences and consumer products companies, and its AI agents assess impact on products and markets, assign follow-up tasks and execute subsequent actions in configurable workflows, with expert review and a recorded outcome for each run. | Compliance | — | Thoropass vs RegASK AI agents | |
 RegScale RegML AI agents (RegScale CCM) Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized. | Compliance | — | Thoropass vs RegScale RegML AI agents | |
 Saidot Agent-first AI governance platform: a knowledge graph of AI risks, controls and policies, an Agent Catalogue, and MCP servers that let customers' agents draft risk assessments. | Compliance | — | Thoropass vs Saidot | |
 trail Governance Agents (GRC and AI governance agents) Munich-based trail's Governance Agents run GRC busywork in the background: they read your project files and sources to collect and link evidence, assess controls, classify systems, run risk and vendor assessments and draft policies, proposing changes that a human approves before anything is written. | Compliance | — | Thoropass vs trail Governance Agents | |
 Transcend Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do. | Compliance | — | Thoropass vs Transcend | |
 Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov) AI agent for US government knowledge workers, grounded in a large corpus of federal and state statutes, regulations, court cases and fiscal data. It runs 50-state research in parallel with citations, monitors legal changes, reviews permit applications against the code, drafts memos and comment responses, and builds internal tools inside the agency boundary. | Compliance | — | Thoropass vs Vulcan Justinian | |
 Workiva Agent Studio (finance, audit and GRC agents) No-code agent builder and prebuilt agents on Workiva's reporting, audit and GRC platform, used for finance tie-outs and roll-forwards and for evidence collection, control testing and remediation, with configurable review and approval steps. | Compliance | — | Thoropass vs Workiva Agent Studio | |
 Abnormal AI Security Mailbox (Abnormal AI for Government) Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. | Security | — | — | |
| Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus. | Business operations | — | — | |
 BILL AI agents (W-9 Agent, Reconciliation Agent and other touchless AP agents) AI agents inside the BILL finance platform for small and midsize businesses: the W-9 Agent requests, follows up on, collects and pre-validates vendor W-9s (names and TINs), and the Reconciliation Agent codes and reconciles receipts, with the customer's team approving the final data. | Business operations | — | — | |
 Blinqx KYC Agent (Wwft client due diligence and UBO checks for accounting firms) Dutch AI agent that runs Wwft client due diligence for accounting and tax firms: it analyses client files, UBO structures and legal constructions, checks identities against PEP and sanctions lists, pulls audit information from the Dutch UBO register and Trade Register, flags profile changes and schedules re-reviews, and delivers audit-ready KYC files with a source reference for every conclusion, while a person makes the decision. | Risk | — | — | |
 Box AI Agents (Box Agent, Extract, Classification and custom agents; Box for Government) Permissions-aware AI agents on Box's content platform: the Box Agent plans multi-step work across files, Extract agents turn documents into structured metadata, a Classification agent labels sensitive content, and Box AI Studio builds custom agents; Box AI sits inside Box's FedRAMP High boundary per the Marketplace listing. | Business operations | — | — | |
 Bretton AI agentic back-office platform (formerly Greenlite AI) Agent platform for bank and fintech financial-crime operations: pre-built and custom agents gather evidence, apply the institution's policy and draft full cases for EDD, monitoring alerts, sanctions, SAR drafting and KYB, with every action logged. | Risk | — | — | |
 BRYTER Hybrid Agents (AI plus rule-based workflow agents for DORA, DPA and NDA contract review) Legal and compliance agents that combine AI document review with BRYTER's rule-based workflow engine to run specific tasks end to end, such as reviewing contracts against DORA, reviewing DPAs and NDAs against a playbook, and generating the amendment agreements or reports. | Business operations | — | — | |
 C1 Autonomous Worker and C1 Agents (identity governance AI agent, formerly ConductorOne) Governed AI agent on C1's identity platform that carries out identity work end to end from a plain-language request (revoking stale admin grants, building access reviews, assembling audit evidence on who reached production, finding orphaned entitlement owners), acting only within the operator's own permissions and logging every action. | Security | — | — | |
| AML/KYC agents that resolve L1 and L2 screening alerts (sanctions, PEPs, adverse media) against the institution's own policies, plus transaction-monitoring and fraud-monitoring agents, with a documented rationale for every decision. | Risk | — | — | |
| Agentic investigation tool built on Thomson Reuters CLEAR public-records data. From a plain-language question it plans and runs searches across CLEAR data and the open web, resolves conflicting records and returns concise cited findings with a record of the searches it ran, for AML, fraud, program-integrity and law-enforcement investigators. | Risk | — | — | |
 Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy. | Security | — | — | |
 Co-Brain Questionnaire Agent (security questionnaire automation) German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval. | Security | — | — | |
 Covasant TPRM (agentic third-party risk management) Third-party risk product from Hyderabad-headquartered Covasant. Purpose-built AI agents onboard vendors through due-diligence workflows, chase vendors who are slow to respond, keep watching news, sanctions and financial data, and, when risk thresholds break, open remediation workflows, track vendor responses, escalate unresolved issues and produce DORA, SOX and NIST reporting packages. | Risk | — | — | |
 Crest TPRM AI agents (Vendor Outreach, Questionnaire Intelligence, Continuous Monitoring, Risk-Based Scoring, Finance, Screening and Efficiency agents) New Delhi-headquartered third-party risk platform with seven agents marked Live: an outreach agent that autonomously sends and follows up vendor emails and voice reminders and escalates non-response, a questionnaire agent that distributes, chases and analyses vendor questionnaires, plus continuous adverse-media/watchlist monitoring, risk-based scoring, financial analysis, screening and efficiency agents that auto-approve low-risk vendors and trigger re-assessments. | Risk | — | — | |
 Data Adhikaar DPDPA agents (ten-agent compliance fabric) India DPDP Act compliance platform run by ten scoped agents for data discovery and RoPA, consent, data principal rights requests, breach response, DPIAs, regulatory intelligence, policy drafting, processor risk and audit evidence, with human approval gates for Board notifications, policy publication and severity downgrades. | Risk | — | — | |
 DataGrail Vera (AI privacy agent) AI privacy agent built into DataGrail's privacy platform that autofills privacy and AI-risk assessments, classifies cookies, detects AI risk, suggests processing activities and troubleshoots DSR integration errors, acting only with user approval. | Risk | — | — | |
 DataVisor Vera and Vera Code (agentic AI for fraud and AML strategy, tuning, alert summaries and SAR drafting) AI teammate for fraud and AML teams on the DataVisor platform. From a plain-language request, Vera orchestrates agents that author detection rules, features and lists, tune strategies against production telemetry, summarise alerts and draft FinCEN-aligned SAR narratives; changes are proposal-only and a human approves before anything reaches production. Vera Code turns requirements into tested, documented configurations. | Risk | — | — | |
 Dotfile Autonomy (KYB/AML review agents) Specialised AI agents that pre-investigate KYB cases end to end (documents, UBOs, AML screening hits, online reputation), auto-approve routine cases under the customer's policy and escalate edge cases with a full audit trail. | Risk | — | — | |
 Feedzai Farol AI Agent AI agent embedded in Feedzai's RiskOps Studio that analyses fraud rules, retrieves and summarises alert data for investigations, and drafts SAR narratives for investigator review. | Risk | — | — | |
 Fenergo KYRA (Fen-AI agentic workforce) Governed agentic workforce on Fenergo's client lifecycle (CLM/KYC) platform: agents complete routine KYC steps, resolve routine screening hits, process documents and source client data, with humans approving outcomes. | Risk | — | — | |
 First AML AI Screening Agent Search and review agents that run the AML screening lifecycle — finding matches, assessing them against the entity profile, and re-checking hits as cases age. | Risk | — | — | |
 FIS AML Investigations Agent Governed AI agent for bank AML alert triage, case investigation and SAR narrative drafting, with analyst confirmation required before any case is closed, escalated or filed. | Risk | — | — | |
 FloQast Transform AI agents (accounting close agents built from finished work, plus prebuilt agents) Close-management platform whose Transform AI agents run accounting workflows end to end (reconciliations, journal entries, close tasks); Transform can rebuild a finished close into a governed, documented agent tested against approved numbers, and each agent needs accountant sign-off before it runs. | Business operations | — | — | |
 FluxForce Agentic OS (28 financial-crime and compliance agents, incl. Rhea Ledger KYC/AML Analyst) An 'Agentic OS' of 28 named AI agents in three squads covering fraud, KYC/AML, sanctions screening, STR/SAR drafting, audit trails and model risk for banks, fintechs and insurers. Each agent works in shadow mode first, then within autonomy bands and a per-agent kill switch that the institution sets. | Risk | — | — | |
 FOCAL by MOZN Agentic AI (AML and fraud investigation agents) Financial-crime platform from Riyadh-based MOZN whose built-in agentic AI triages AML alerts, summarises cases, recommends dispositions, auto-closes low-risk or duplicate cases and drafts SARs, alongside a Fraud Investigation Agent; humans keep consequential decisions. | Risk | — | — | |
 Freeday KYC digital employee (AI agents for KYC document collection, verification and screening) Rotterdam 'digital employee' platform whose KYC agents request, validate and classify customer documents in real time, guide customers through verification by voice or chat, run sanctions, adverse-media and PEP checks before onboarding completes, and close routine KYC checks without manual review, routing exceptions to analysts with pre-extracted data and logging every decision for supervisors. | Risk | — | — | |
 Genpact Transaction Monitoring Analyst (Banking Analyst Suite) Generally available agentic AML module for banks: a central orchestrator coordinates specialised agents that gather data, analyse transactions and customer behaviour, review prior alerts and deliver a decision-ready Level 1 alert recommendation with documented rationale, with analysts making every final decision. | Risk | — | — | |
 Gu1 compliance and fraud AI agents (Onboarding, Screening, KYT, Case and Reporting agents) Buenos Aires-headquartered compliance and fraud platform for Latin American fintechs and banks in which 25+ specialised AI agents run KYC/KYB onboarding, sanctions/PEP screening, real-time transaction monitoring, alert triage with an auditable case file, and regulator-format SAR/STR drafting, while a human decides and signs. | Risk | — | — | |
 Halo AI Agents (service management with FedRAMP GRC module) ITSM/ESM platform (formerly HaloITSM) with AI agents: conversational agents for end users and fulfillers, and process agents (Dispatch, 1st Line Support, Major Incident, Knowledge, Change Management) that act on their own within role-based permissions. The platform, including a FedRAMP/CMMC GRC module, is FedRAMP 20x Moderate. | Business operations | — | — | |
 Hawk AI agents (AML Investigative, CDD, Screening and Regulatory Reporting Agents) Agentic AI overlay for AML teams: agents that gather data, summarise cases, flag typologies, draft SAR narratives and triage screening hits, with a human in the loop. | Risk | — | — | |
 Hummingbird AI Agents (Research and Review Agents) AI agents for financial-crime compliance: a Research Agent that gathers and synthesises subject evidence and a Review Agent that fills out case reviews per your procedures, on an agent orchestration platform with analyst approval. | Risk | — | — | |
 Hypatos agentic GBS workforce (finance back-office agents) Teams of AI agents for finance shared services that capture, code, tax-validate and PO-match invoices, process order confirmations, delivery notes and dunning letters, and post validated results to the ERP with traceable reasoning. | Business operations | — | — | |
 IBM watsonx Orchestrate (incl. watsonx Orchestrate for Government) IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate. | Business operations | — | — | |
 IDfy AI Agents Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance. | Risk | — | — | |
 IndiSec DPDPA compliance agents (Veda AI privacy analyst) India DPDP Act compliance platform where assessment, obligation, consent, notification and evidence agents (plus the Veda AI privacy analyst) run gap assessments, track obligations, draft notices and assemble evidence, with lawyers and the customer approving every gate. | Risk | — | — | |
 Ketch Agent Network Agent layer behind Ketch's privacy platform that self-populates data maps, runs always-on gap analysis between regulations, your commitments and live systems, and proposes reviewable configuration changes, DPIAs and RoPA exports. | Risk | — | — | |
 KnowBe4 AIDA (AI Defense Agents) Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes). | Security | — | — | |
 Leah (formerly ContractPodAi) Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations. | Business operations | — | — | |
 LEGALFLY agents (Review, Legal Radar and Agent Studio) Legal AI platform with contracting, research and compliance agents, plus an Agent Studio that runs whole legal workflows from intake to approval against the organisation's playbooks. | Business operations | — | — | |
 Legiscope GDPR AI agents (RoPA, processor/DPA review, DPIA, incident and rights-request workflows) Vilnius-registered 'agentic compliance' GDPR platform whose AI agents write and keep the Article 30 register current as the business changes, find and assess every processor's DPA against Article 28, prepare DPIAs, draft breach-notification decisions and turn data-subject requests into deadline-tracked case records, routing judgement calls to the privacy team. | Risk | — | — | |
 Light agents (Internal Audit, Bill, Contract and Accrual Agents) Agentic ERP for multi-entity finance teams: executive agents (Bill, Contract, Accrual) do accounting work, audit agents check their output and instructions against written accounting and approval policies, and materiality-based approval controls decide what needs a controller or CFO. | Business operations | — | — | |
 Luci AI Agent Explainable AI agent for financial-crime investigations that prepares cases, runs triage and supports SAR-oriented workflows while institutions keep governance decisions. | Risk | — | — | |
 Lumos Albus and Identity Agent Force (identity governance agents) AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security | — | — | |
 Metis Legenda AML (AI agent for KYC due diligence and transaction monitoring) Milan AML product in which an AI agent runs Italian 'adeguata verifica' (customer due diligence) end to end: it analyses each onboarding document for relevance and extracts the data, traces beneficial owners through chains of shell companies using private documents and public databases, screens PEP, EU/UN sanctions and internal watchlists, proposes a reasoned risk classification and logs every step in a traceable report; a companion agent analyses transactions to surface real behavioural anomalies and cut false positives. | Risk | — | — | |
 MindBridge AI Autonomous financial-oversight platform that analyses 100% of transactions to surface anomalies, control failures and fraud risk for finance and audit teams. | Risk | — | — | |
 New Odyssey Pegasus Compliance Agent (DSAR agent) Packaged DSAR agent that handles intake, jurisdiction deadlines, identity checkpoints, discovery across connected HRIS/CRM/ticketing/file systems, third-party PII redaction and response drafting, with a person approving the release. | Risk | — | — | |
 NICE Actimize Xceed AI Agents (fraud and AML alert triage and investigation agents) AI agents inside NICE Actimize's Xceed AI FRAML platform (combined fraud prevention and AML compliance for financial institutions, with an offering for credit unions and community banks). The agents automate alert categorisation and triage, dismiss false positives and summarise cases, and 'Converse and Suggest' agents plus a CoPilot suggest investigative paths in natural language, with analysts in the loop who keep control of decisions. | Risk | — | — | |
 noze CyberAgent (AI agent for continuous attack-surface monitoring, automated validation pentesting and NIS2 evidence) Italian agent for mid-sized companies and NIS2 entities without an in-house SOC: after verifying domain control it continuously discovers assets and assesses network, web apps and APIs, correlates findings with EPSS and CISA KEV, confirms exploitability with automated validation pentests, ranks risks by business impact and prepares NIS2, DORA and ISO 27001 reports; the team decides what to fix. | Security | — | — | |
 Numeric agentic subledgers (close and accounting agents) Close-management and accounting platform whose agents turn source records (leases, commission plans, card spend, payables) into subledgers, propose the accounting treatment for approval, build schedules and derive journal entries automatically. | Business operations | — | — | |
 Oracle Nexus for financial crime investigations (Nexus Case Flow and Nexus Reach agents) Oracle's financial-crime case management with agentic AI that pre-investigates AML, fraud, sanctions and KYC cases unprompted, gathers evidence and entity context, runs adverse-media scans and drafts investigation narratives for human review. | Risk | — | — | |
 osapiens Agent Factory (supplier and supply-chain compliance agents) Agent layer across the osapiens HUB that runs supplier onboarding, record validation, questionnaire pre-fill, supplier case management and risk-trend analysis for supply-chain due diligence (LkSG, CSDDD, EUDR and more), within customer-set guardrails. | Risk | — | — | |
 Oscilar Agent Hub (AML, sanctions, fraud and onboarding agents) Risk-decisioning platform with 30+ orchestrated agents on a shared risk memory, including AML L1 review, sanctions screening dispositions, adverse media, EDD dossier, SAR narrative, fraud L1 review, fraud-network and KYB review agents, where every recommendation is confirmed by a human analyst. | Risk | — | — | |
 Payhawk AI agents (Financial Controller, Procurement, Payments and more) Spend-management AI agents that enforce spend policy, collect and match receipts, chase approvals, code transactions for month-end close and handle procurement, travel and payment requests. | Business operations | — | — | |
 Pega AI agents (Pega Cloud for Government) Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized. | Business operations | — | — | |
 Privado Wren (AI privacy analyst agent) AI privacy agent that runs privacy assessments end to end: it monitors tools like Jira, CLM and procurement for new activity, triggers the right PIA/DPIA/TIA/RoPA, researches risk, populates assessments with evidence and routes approvals. | Risk | — | — | |
 ProcessUnity TPRM AI Agents (Evidence Evaluator, Assessment Autofill) Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control. | Risk | — | — | |
 ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate). | Security | — | — | |
 Riskonnect AI Agent Library (Agentforce 360 for Riskonnect) Library of prebuilt risk and GRC agents on Salesforce Agentforce inside Riskonnect: risk-register signal, risk builder, regulatory mapping, policy impact and horizon-monitoring agents, plus claims and incident intake/audit agents. | Risk | — | — | |
 Sardine agentic fraud and AML ops agents Fraud and AML platform with named agents that disposition screening alerts, run enhanced due diligence and business verification, analyse networks, draft SAR narratives, tune monitoring rules and build dispute packages. | Risk | — | — | |
 SentinelOne Purple AI (agentic AI security analyst) Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized. | Security | — | — | |
 Shufti Transaction Trust Monitoring (agentic FRAML engine) Agentic fraud and AML (FRAML) transaction monitoring in which governed AI agents score transactions, triage and investigate alerts and draft regulator-format SAR/STR reports, with the MLRO approving every filing. | Risk | — | — | |
 Sigma360 EDD Agent (enhanced due diligence) AI agent for enhanced due diligence (EDD) on high-risk customers: it gathers internal and external data, unifies KYC/KYB data, sanctions, adverse media and ownership/associate risk, flags risk factors and mitigants, recommends next steps and drafts a fully cited risk narrative for regulatory review, while the analyst makes the final decision. | Risk | — | — | |
 Signzy Agentic CKYC Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening. | Risk | — | — | |
 Silent Eight Iris 7 AI Agents Policy-bound AI agents that adjudicate sanctions, PEP, adverse-media, transaction-monitoring, CDD, trade and fraud alerts on top of a bank's existing screening and monitoring systems. | Risk | — | — | |
| Agentic AI product from Sopra Steria's German company for anti-financial-crime teams: it takes transaction-monitoring alerts and runs the first-level investigation itself (gathering case information from approved sources, analysing facts and patterns in the alert's context, documenting results, sources and reasoning) and prepares a recommended action, while the final case decision stays with the analyst. | Risk | — | — | |
 spektr AI agents (Case AI, KYB AI and compliance agents) Compliance platform for onboarding, monitoring and case work where AI agents run sanctions, PEP, adverse-media and alert investigations, resolve ownership (UBO) gaps and review documents, returning a cited verdict and recommended action for an analyst to decide. | Risk | — | — | |
 Sphinx AI compliance analysts (KYC, KYB and AML agents) AI analyst agents for financial-crime compliance that run KYC and KYB onboarding reviews, disposition sanctions, PEP and adverse-media alerts, perform enhanced due diligence and rescreenings, and draft SAR/UAR filings with audit-ready decision logs. | Risk | — | — | |
 SpotDraft Sidebar AI agents and VerifAI AI agents in SpotDraft's contract platform for contract review, contract queries, clause drafting and regulatory tracking, plus VerifAI playbook review inside Microsoft Word. | Business operations | — | — | |
 Steuerboard Kompass (agentic OS for German tax firms: AI agents working directly on DATEV data) Generally available since Oct 14, 2026: an agentic operating system for German tax-advisory firms (Steuerkanzleien). AI agents work on the firm's DATEV data in the background. They check client bookkeeping for missing receipts, unusual costs and missing tax codes, flag missing year-end closing entries, calculate BWA metrics and email clients to request missing documents, and changes go back to DATEV only after the firm approves them. | Business operations | — | — | |
 SymphonyAI SRI Agents (Symphony Risk Intelligence) Financial-crime agents on SymphonyAI's agent-native Symphony Risk Intelligence platform: manager and specialist agents that prepare TM and screening investigations, enrich watchlist records, track threat and regulatory intelligence, and run KYC/EDD workflows. | Risk | — | — | |
 Taktile AI agents (onboarding, sanctions and adverse-media agents) Agentic decision platform for banks and insurers with a library of pre-built agents, including Adverse Media Investigation, Business Ownership Intelligence and Sanctions and Watchlist Match Review agents, that run inside decision flows with human review. | Risk | — | — | |
 Themis AI Investigator (AML/KYB due-diligence agents) A coordinated team of AML-trained AI agents that runs enhanced due-diligence and KYB investigations in minutes: registry and web collection, officer/UBO screening, adverse-media analysis and transparent red/amber/green risk grading, with analysts keeping the final decision. | Risk | — | — | |
 ThetaRay Ray (agentic AML investigation suite) AML investigation suite inside ThetaRay's Investigation Center, working on top of ThetaRay's transaction monitoring. Ray analyses each alert end to end (case data, customer and counterparty behaviour, KYC/profile alignment, jurisdictions, related past alerts), produces a full investigation report with a narrative, explained decision and recommended next steps, and gives analysts an on-demand assistant; analysts make the final decision. | Risk | — | — | |
 Tookitaki FinCense APAC AML and fraud platform that combines community typologies with purpose-built AI agents for detection, screening, customer risk and investigation. | Risk | — | — | |
 TrustCloud TrustLens (agentic third-party risk assessments) Agentic third-party cyber risk assessments that scope each vendor by inherent risk, analyse outside-in ratings, inside-out control evidence and vendor artifacts, and produce cited risk summaries with continuous drift monitoring. | Risk | — | — | |
 Unit21 AI Agents for fraud and AML AI agents that run fraud and AML alert triage and investigations: they pull transaction history, check watchlists, run open-source research, assemble evidence, draft narratives and recommend dispositions for analyst approval. | Risk | — | — | |
 Uptiq compliance and risk agents (sanctions screening, BSA/AML and regulatory reporting agents for banks) Agents for bank and credit-union compliance teams on Uptiq's Qore platform. A Sanctions Screening Agent screens every transaction and party and prioritises alerts by risk, a BSA/AML Agent assembles case files and drafts SAR and CTR narratives for disposition, and a Regulatory Reporting Agent prepares and validates filings and tracks regulatory changes to policy; agents run under the institution's own policies, permissions and approval gates, with every action logged. | Risk | — | — | |
| Brazilian risk and compliance decisioning platform whose AI agents read the full KYC/KYB dossier, compare it with current regulation, flag risks such as adverse-media homonyms, and suggest a justified decision with a confidence level for the analyst to validate, with continuous re-analysis when a monitored person or company changes. | Risk | — | — | |
 Veeam PrivacyOps AI agents (Consent Agent, DSR and Assessment agents) Privacy-operations agents on Veeam's DataAI Command Platform: a generally available Consent Agent that builds, tests, monitors and auto-remediates consent across sites and downstream systems, plus announced DSR intake-form and assessment-autofill agents. | Risk | — | — | |
 Vivox AI compliance agents (Rachel, AI compliance analyst) Pre-trained AI agents for AML, KYB/KYC and financial crime that take on Level 1 analyst work: sanctions and PEP alert reviews, adverse media monitoring, corporate registry and UBO analysis, and narrative report writing. | Risk | — | — | |
 Whistic Automation Orchestrator (agentic assessments) Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval. | Risk | — | — | |
 Wolfia Questionnaire Agent (security questionnaires and trust center) Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension. | Security | — | — | |
 WorkFusion AI Agents (Evelyn, Tara, Evan, Isaac, Edward, Kayla) Named AI agents that act as L1/L2 AML analysts: they review and disposition sanctions, PEP and watchlist alerts, transaction screening and monitoring alerts, adverse media, EDD and KYC work, escalating or closing cases with justification. | Risk | — | — | |
 Xpert-iA Agent Onboarding clients / LCB-FT (AML onboarding agent for French accounting firms) French AI agent for accounting firms' anti-money-laundering (LCB-FT) client onboarding: from a SIREN it pulls the company and directors from the national business register, sends the client a secure portal link and chases missing documents, checks beneficial owners against the RBE register, asset-freeze lists, FATF/EU country risk and document consistency, screens for PEPs, and assembles a traced due-diligence file for the firm to decide. | Risk | — | — | |
 Zenoo AI investigation agents (Screening Resolver, Case Narrator and others) Ten specialised AML investigation agents that screen, research, analyse and validate each onboarding or transaction alert, write a cited case narrative and hand the decision to a human analyst; a Red Team Agent challenges every finding. | Risk | — | — | |
 Zoven AI Bengaluru-built fraud, AML and KYC/KYB platform where AI agents run investigation SOPs case by case and draft cited verdicts for analysts to decide. | Risk | — | — |
Order is mechanical (shared dataset tags, then same primary category) — a relevance order, not a ranking or quality judgement. Framework tags indicate relevance, not certification.