Quick answer
164 verified listings are on this best-of page for Risk in dataset v0.1.27 (generated 2026-10-27).
Order is mechanical (primary category first, then by number of framework tags), not a paid ranking or quality judgement.
Listings are in the Risk category of the open dataset.
AI agents for enterprise, third-party, privacy and financial crime risk programs.
Listed: agents in the Risk category (primary category first), then by number of framework tags. Order is mechanical, not a paid ranking.
Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
AI GRC platform (Risk Cloud) with GRC Agents that act under human supervision for third-party risk, AI governance, enterprise risk and business continuity.
Cyber risk and third-party risk management platform with published CRPM pricing page.
Crest (Crest Veda TechWorks Private Limited)
India
New Delhi-headquartered third-party risk platform with seven agents marked Live: an outreach agent that autonomously sends and follows up vendor emails and voice reminders and escalates non-response, a questionnaire agent that distributes, chases and analyses vendor questionnaires, plus continuous adverse-media/watchlist monitoring, risk-based scoring, financial analysis, screening and efficiency agents that auto-approve low-risk vendors and trigger re-assessments.
Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation.
Thomson Reuters
Canada
Agentic investigation tool built on Thomson Reuters CLEAR public-records data. From a plain-language question it plans and runs searches across CLEAR data and the open web, resolves conflicting records and returns concise cited findings with a record of the searches it ran, for AML, fraud, program-integrity and law-enforcement investigators.
Covasant (Covasant Technologies Private Limited, Hyderabad)
India
Third-party risk product from Hyderabad-headquartered Covasant. Purpose-built AI agents onboard vendors through due-diligence workflows, chase vendors who are slow to respond, keep watching news, sanctions and financial data, and, when risk thresholds break, open remediation workflows, track vendor responses, escalate unresolved issues and produce DORA, SOX and NIST reporting packages.
Data Adhikaar (Qodequay Technologies Pvt. Ltd.)
India
India DPDP Act compliance platform run by ten scoped agents for data discovery and RoPA, consent, data principal rights requests, breach response, DPIAs, regulatory intelligence, policy drafting, processor risk and audit evidence, with human approval gates for Board notifications, policy publication and severity downgrades.
Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance.
IndiSec (Indisec Edge Private Limited)
India
India DPDP Act compliance platform where assessment, obligation, consent, notification and evidence agents (plus the Veda AI privacy analyst) run gap assessments, track obligations, draft notices and assemble evidence, with lawyers and the customer approving every gate.
Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control.
A third-party risk platform run by a coordinated team of AI agents. They discover and classify vendors from identity, procurement and IT systems, collect and analyse vendor documentation and questionnaires against external attack-surface intelligence, chase vendors for missing evidence and remediation, and orchestrate approvals with humans in control.
AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor.
Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening.
ACTICO (ACTICO GmbH)
Germany
Rules-based AML, customer screening, payment screening and market-abuse software for banks and insurers in which AI agents do the research, analysis and documentation work (for example adverse-media checks on screening hits) inside the platform's governance, with the compliance analyst making the final decision.
AiPrise (AiPrise, Inc.)
United States
KYC/KYB and compliance platform whose AI agents review AML screening hits (sanctions, PEP, adverse media) and recommend a decision under the customer's AML policy, check business websites for legitimacy and risk with ongoing monitoring, and review documents, with an analyst confirming the outcome.
Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach.
Dutch AI agent that runs Wwft client due diligence for accounting and tax firms: it analyses client files, UBO structures and legal constructions, checks identities against PEP and sanctions lists, pulls audit information from the Dutch UBO register and Trade Register, flags profile changes and schedules re-reviews, and delivers audit-ready KYC files with a source reference for every conclusion, while a person makes the decision.
Agent platform for bank and fintech financial-crime operations: pre-built and custom agents gather evidence, apply the institution's policy and draft full cases for EDD, monitoring alerts, sanctions, SAR drafting and KYB, with every action logged.
Castellum.AI
United States
AML/KYC agents that resolve L1 and L2 screening alerts (sanctions, PEPs, adverse media) against the institution's own policies, plus transaction-monitoring and fraud-monitoring agents, with a documented rationale for every decision.
Healthcare third-party risk agent in Censinet RiskOps that reviews vendor questionnaire responses and supporting documents (such as SOC 2 and penetration-test reports), captures integration details from requests, identifies findings and drafts assessment reports and corrective action plans for the risk assessor to validate.
CleverChain (CleverChain Ltd)
United Kingdom
KYB, KYC, AML and third-party due-diligence platform where the VERA agent runs end-to-end investigations (ownership chain, business activity, sanctions and adverse media) into a cited, policy-mapped report, and LUMA handles AML screening and ongoing monitoring, with analysts approving high-risk decisions.
AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions.
AI privacy agent built into DataGrail's privacy platform that autofills privacy and AI-risk assessments, classifies cookies, detects AI risk, suggests processing activities and troubleshoots DSR integration errors, acting only with user approval.
Dataleon (Dataleon SAS)
France
French KYB/KYC compliance platform whose agent Léon pre-audits pending customer files, has KYC and KYB 'workers' review them and recommend the next step from the firm's past decisions, and launches specialised agents in parallel for identity verification, sanctions/PEP screening and customer follow-ups, with analysts making the final decision.
DataVisor (DataVisor, Inc.)
United States
AI teammate for fraud and AML teams on the DataVisor platform. From a plain-language request, Vera orchestrates agents that author detection rules, features and lists, tune strategies against production telemetry, summarise alerts and draft FinCEN-aligned SAR narratives; changes are proposal-only and a human approves before anything reaches production. Vera Code turns requirements into tested, documented configurations.
Specialised AI agents that pre-investigate KYB cases end to end (documents, UBOs, AML screening hits, online reputation), auto-approve routine cases under the customer's policy and escalate edge cases with a full audit trail.
Elucidate (Elucidate GmbH)
Germany
An autonomous financial-crime compliance agent on Elucidate's risk-intelligence platform for banks and payment institutions. It screens and monitors transactions across SWIFT and ISO 20022, triages adverse media, traces hidden ownership and layering, investigates alerts to disposition and drafts CDD reports.
AI agent embedded in Feedzai's RiskOps Studio that analyses fraud rules, retrieves and summarises alert data for investigations, and drafts SAR narratives for investigator review.
Governed agentic workforce on Fenergo's client lifecycle (CLM/KYC) platform: agents complete routine KYC steps, resolve routine screening hits, process documents and source client data, with humans approving outcomes.
Search and review agents that run the AML screening lifecycle — finding matches, assessing them against the entity profile, and re-checking hits as cases age.
Governed AI agent for bank AML alert triage, case investigation and SAR narrative drafting, with analyst confirmation required before any case is closed, escalated or filed.
Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed.
FluxForce (FluxForce AI Pvt. Ltd.)
India
An 'Agentic OS' of 28 named AI agents in three squads covering fraud, KYC/AML, sanctions screening, STR/SAR drafting, audit trails and model risk for banks, fintechs and insurers. Each agent works in shadow mode first, then within autonomy bands and a per-agent kill switch that the institution sets.
Financial-crime platform from Riyadh-based MOZN whose built-in agentic AI triages AML alerts, summarises cases, recommends dispositions, auto-closes low-risk or duplicate cases and drafts SARs, alongside a Fraud Investigation Agent; humans keep consequential decisions.
Freeday (Freeday B.V.)
Netherlands
Rotterdam 'digital employee' platform whose KYC agents request, validate and classify customer documents in real time, guide customers through verification by voice or chat, run sanctions, adverse-media and PEP checks before onboarding completes, and close routine KYC checks without manual review, routing exceptions to analysts with pre-extracted data and logging every decision for supervisors.
Generally available agentic AML module for banks: a central orchestrator coordinates specialised agents that gather data, analyse transactions and customer behaviour, review prior alerts and deliver a decision-ready Level 1 alert recommendation with documented rationale, with analysts making every final decision.
Gradient Labs (Gradient Labs Limited)
United Kingdom
London AI-agent company for financial services whose KYB Agent, in production, checks each business-verification document against the customer's internal policy, requests anything missing from the customer, and verifies the business before routing it to onboarding; it runs alongside Gradient Labs' disputes, lending/collections and customer-service agents.
Gu1 (operated by Gueno USA LLC)
Argentina
Buenos Aires-headquartered compliance and fraud platform for Latin American fintechs and banks in which 25+ specialised AI agents run KYC/KYB onboarding, sanctions/PEP screening, real-time transaction monitoring, alert triage with an auditable case file, and regulator-format SAR/STR drafting, while a human decides and signs.
Agentic AI overlay for AML teams: agents that gather data, summarise cases, flag typologies, draft SAR narratives and triage screening hits, with a human in the loop.
AI agents for financial-crime compliance: a Research Agent that gathers and synthesises subject evidence and a Review Agent that fills out case reviews per your procedures, on an agent orchestration platform with analyst approval.
INETCO (INETCO Systems Limited)
Canada
Payment-fraud prevention platform for banks, processors and payment service providers whose agentic AI fraud agents collate transaction data, triage alerts, prioritise high-risk cases and give explainable risk scores and recommendations, running on a proprietary small language model that can be deployed on-premise.
Intrepid Fox (Intrepid Fox Project Limited)
United Kingdom
AI-native KYB platform for banks, EMIs, PSPs and fintechs in which embedded AI agents check business-onboarding documents in real time, ask the applicant follow-up questions, pull data from official company registers and compile an audit-ready report for the compliance officer's decision.
Agent layer behind Ketch's privacy platform that self-populates data maps, runs always-on gap analysis between regulations, your commitments and live systems, and proposes reviewable configuration changes, DPIAs and RoPA exports.
Legiscope (Legiscope UAB)
Lithuania
Vilnius-registered 'agentic compliance' GDPR platform whose AI agents write and keep the Article 30 register current as the business changes, find and assess every processor's DPA against Article 28, prepare DPIAs, draft breach-notification decisions and turn data-subject requests into deadline-tracked case records, routing judgement calls to the privacy team.
Explainable AI agent for financial-crime investigations that prepares cases, runs triage and supports SAR-oriented workflows while institutions keep governance decisions.
Metis (Metis S.r.l.)
Italy
Milan AML product in which an AI agent runs Italian 'adeguata verifica' (customer due diligence) end to end: it analyses each onboarding document for relevance and extracts the data, traces beneficial owners through chains of shell companies using private documents and public databases, screens PEP, EU/UN sanctions and internal watchlists, proposes a reasoned risk classification and logs every step in a traceable report; a companion agent analyses transactions to surface real behavioural anomalies and cut false positives.
Middesk (Middesk, Inc.)
United States
Business-identity platform whose specialised AI agents investigate and resolve KYB review work (OFAC false positives, address discrepancies, beneficial-ownership verification, litigation matches, operating-status checks and merchant-risk monitoring) across 400+ data sources, returning evidence-backed, audit-ready decisions through one API.
Autonomous financial-oversight platform that analyses 100% of transactions to surface anomalies, control failures and fraud risk for finance and audit teams.
Muinmos (Muinmos ApS)
Denmark
Client onboarding and lifecycle-management platform for investment firms, banks, crypto and payment firms that runs KYC, KYB, screening, client classification, suitability and risk assessment through specialised AI agents coordinated by an orchestration agent, with event-driven perpetual-KYC monitoring.
Napier AI (Napier Technologies Limited)
United Kingdom
Configurable AI agents in London-based Napier AI's Continuum financial-crime platform. In Client Screening and Transaction Screening, compliance teams build and tailor 'responsible agents' in a no-code sandbox and choose how much autonomy to hand over, from flagging sanctions, PEP and adverse-media matches for review to clearing known patterns automatically before they reach a queue, with every agent action explained and captured in the audit trail.
Nasdaq Verafin (Verafin, a Nasdaq company)
Canada
A suite of role-based agentic AI analysts for bank and credit-union financial-crime teams. They triage and disposition sanctions, money-laundering and fraud alerts and prepare EDD recommendations. Institutions can switch on auto-dispositioning, run them inside the Verafin platform or overlay them on third-party systems.
Packaged DSAR agent that handles intake, jurisdiction deadlines, identity checkpoints, discovery across connected HRIS/CRM/ticketing/file systems, third-party PII redaction and response drafting, with a person approving the release.
NICE Actimize (a business of NICE Ltd.)
Israel
AI agents inside NICE Actimize's Xceed AI FRAML platform (combined fraud prevention and AML compliance for financial institutions, with an offering for credit unions and community banks). The agents automate alert categorisation and triage, dismiss false positives and summarise cases, and 'Converse and Suggest' agents plus a CoPilot suggest investigative paths in natural language, with analysts in the loop who keep control of decisions.
Oracle (Oracle Financial Services)
United States
Oracle's financial-crime case management with agentic AI that pre-investigates AML, fraud, sanctions and KYC cases unprompted, gathers evidence and entity context, runs adverse-media scans and drafts investigation narratives for human review.
Agent layer across the osapiens HUB that runs supplier onboarding, record validation, questionnaire pre-fill, supplier case management and risk-trend analysis for supply-chain due diligence (LkSG, CSDDD, EUDR and more), within customer-set guardrails.
Oscilar (Oscilar, Inc.)
United States
Risk-decisioning platform with 30+ orchestrated agents on a shared risk memory, including AML L1 review, sanctions screening dispositions, adverse media, EDD dossier, SAR narrative, fraud L1 review, fraud-network and KYB review agents, where every recommendation is confirmed by a human analyst.
Point Predictive
United States
Specialist fraud agents for auto lenders, banks, credit unions and finance companies, launched Oct 16, 2026. They review consortium loan applications in real time for fraud rings and produce agentic forensic fraud reviews of loan files in seconds. Plain-language portfolio and dealer-risk questions run over Point Predictive's lending-fraud consortium.
AI privacy agent that runs privacy assessments end to end: it monitors tools like Jira, CLM and procurement for new activity, triggers the right PIA/DPIA/TIA/RoPA, researches risk, populates assessments with evidence and routes approvals.
Procol (Procol Tech Private Limited)
India
A coordinated set of procurement-side AI agents that run supplier onboarding from invite to approval. They validate tax IDs, licences and certificates, run continuous AML, sanctions and debarment screening, track contract expiry and compliance deviations with audit trails, and score suppliers on cost, quality, delivery and compliance.
Library of prebuilt risk and GRC agents on Salesforce Agentforce inside Riskonnect: risk-register signal, risk builder, regulatory mapping, policy impact and horizon-monitoring agents, plus claims and incident intake/audit agents.
Agentic third-party risk management: a swarm of 100+ specialised agents runs the vendor lifecycle from intake and due diligence through remediation, continuous monitoring and offboarding.
Fraud and AML platform with named agents that disposition screening alerts, run enhanced due diligence and business verification, analyse networks, draft SAR narratives, tune monitoring rules and build dispute packages.
Shufti (Shufti Pro Limited)
United Kingdom
Agentic fraud and AML (FRAML) transaction monitoring in which governed AI agents score transactions, triage and investigate alerts and draft regulator-format SAR/STR reports, with the MLRO approving every filing.
AI agent for enhanced due diligence (EDD) on high-risk customers: it gathers internal and external data, unifies KYC/KYB data, sanctions, adverse media and ownership/associate risk, flags risk factors and mitigants, recommends next steps and drafts a fully cited risk narrative for regulatory review, while the analyst makes the final decision.
Policy-bound AI agents that adjudicate sanctions, PEP, adverse-media, transaction-monitoring, CDD, trade and fraud alerts on top of a bank's existing screening and monitoring systems.
Sopra Steria (Sopra Steria SE, Hamburg)
Germany
Agentic AI product from Sopra Steria's German company for anti-financial-crime teams: it takes transaction-monitoring alerts and runs the first-level investigation itself (gathering case information from approved sources, analysing facts and patterns in the alert's context, documenting results, sources and reasoning) and prepares a recommended action, while the final case decision stays with the analyst.
Compliance platform for onboarding, monitoring and case work where AI agents run sanctions, PEP, adverse-media and alert investigations, resolve ownership (UBO) gaps and review documents, returning a cited verdict and recommended action for an analyst to decide.
AI analyst agents for financial-crime compliance that run KYC and KYB onboarding reviews, disposition sanctions, PEP and adverse-media alerts, perform enhanced due diligence and rescreenings, and draft SAR/UAR filings with audit-ready decision logs.
Financial-crime agents on SymphonyAI's agent-native Symphony Risk Intelligence platform: manager and specialist agents that prepare TM and screening investigations, enrich watchlist records, track threat and regulatory intelligence, and run KYC/EDD workflows.
Agentic decision platform for banks and insurers with a library of pre-built agents, including Adverse Media Investigation, Business Ownership Intelligence and Sanctions and Watchlist Match Review agents, that run inside decision flows with human review.
Themis (Themis International Services Ltd)
United Kingdom
A coordinated team of AML-trained AI agents that runs enhanced due-diligence and KYB investigations in minutes: registry and web collection, officer/UBO screening, adverse-media analysis and transparent red/amber/green risk grading, with analysts keeping the final decision.
AML investigation suite inside ThetaRay's Investigation Center, working on top of ThetaRay's transaction monitoring. Ray analyses each alert end to end (case data, customer and counterparty behaviour, KYC/profile alignment, jurisdictions, related past alerts), produces a full investigation report with a narrative, explained decision and recommended next steps, and gives analysts an on-demand assistant; analysts make the final decision.
APAC AML and fraud platform that combines community typologies with purpose-built AI agents for detection, screening, customer risk and investigation.
Agentic AI inside Trulioo's KYB verification workflow from Vancouver-headquartered Trulioo. When registries run out, the UBO Discovery Agent researches filings, disclosures, legal and public records, OSINT and verified third-party databases, reaches registries without API connectivity in real time, reconstructs the beneficial-ownership chain with jurisdiction-specific control logic, cites every finding and reports gaps instead of guessing.
Agentic third-party cyber risk assessments that scope each vendor by inherent risk, analyse outside-in ratings, inside-out control evidence and vendor artifacts, and produce cited risk summaries with continuous drift monitoring.
AI agents that run fraud and AML alert triage and investigations: they pull transaction history, check watchlists, run open-source research, assemble evidence, draft narratives and recommend dispositions for analyst approval.
Uptiq (UPTIQ, Inc.)
United States
Agents for bank and credit-union compliance teams on Uptiq's Qore platform. A Sanctions Screening Agent screens every transaction and party and prioritises alerts by risk, a BSA/AML Agent assembles case files and drafts SAR and CTR narratives for disposition, and a Regulatory Reporting Agent prepares and validates filings and tracks regulatory changes to policy; agents run under the institution's own policies, permissions and approval gates, with every action logged.
Brazilian risk and compliance decisioning platform whose AI agents read the full KYC/KYB dossier, compare it with current regulation, flag risks such as adverse-media homonyms, and suggest a justified decision with a confidence level for the analyst to validate, with continuous re-analysis when a monitored person or company changes.
Veeam Software (Securiti AI, a Veeam company)
United States
Privacy-operations agents on Veeam's DataAI Command Platform: a generally available Consent Agent that builds, tests, monitors and auto-remediates consent across sites and downstream systems, plus announced DSR intake-form and assessment-autofill agents.
VISO TRUST (a Protecht company; Valente Sherman, Inc.)
United States
TPRM agent that launches due diligence as soon as a vendor is added, requests and renews SOC 2, ISO and pen-test artifacts, sends focused follow-ups, monitors breach advisories and drafts impact reports, escalating only exceptions to the team.
Vivox AI (Digital Intelligent Solutions Ltd)
United Kingdom
Pre-trained AI agents for AML, KYB/KYC and financial crime that take on Level 1 analyst work: sanctions and PEP alert reviews, adverse media monitoring, corporate registry and UBO analysis, and narrative report writing.
WealthAi (WealthAi Technology Limited)
United Kingdom
AI agents inside the WealthAi operating system for wealth managers that run client onboarding and KYC end-to-end: they collect client information and documents, spot what is missing, generate forms, and start identity verification, PEP and sanctions screening, KYC and account checks, bringing in a person only where review or approval is needed.
Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval.
Named AI agents that act as L1/L2 AML analysts: they review and disposition sanctions, PEP and watchlist alerts, transaction screening and monitoring alerts, adverse media, EDD and KYC work, escalating or closing cases with justification.
Xpert-iA (Xpert-IA SAS)
France
French AI agent for accounting firms' anti-money-laundering (LCB-FT) client onboarding: from a SIREN it pulls the company and directors from the national business register, sends the client a secure portal link and chases missing documents, checks beneficial owners against the RBE register, asset-freeze lists, FATF/EU country risk and document consistency, screens for PEPs, and assembles a traced due-diligence file for the firm to decide.
Ten specialised AML investigation agents that screen, research, analyse and validate each onboarding or transaction alert, write a cited case narrative and hand the decision to a human analyst; a Red Team Agent challenges every finding.
Procurement-embedded third-party risk agents that screen and score vendors, fast-track low-risk ones, route high-risk ones for deeper review, analyse surveys and documents for key risks, and schedule re-assessments by risk tier.
Bengaluru-built fraud, AML and KYC/KYB platform where AI agents run investigation SOPs case by case and draft cited verdicts for analysts to decide.
Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform.
Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.
Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit.
AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer.
Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires.
Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring.
AI GRC platform whose agents collect and map evidence, test controls continuously, assess policies against frameworks, run natural-language 'TI Playbooks' and answer security questionnaires.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.
AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.
EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs.
Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked.
German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval.
Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions.
trail (trail GmbH, part of Collibra since Oct 2026)
Germany
Munich-based trail's Governance Agents run GRC busywork in the background: they read your project files and sources to collect and link evidence, assess controls, classify systems, run risk and vendor assessments and draft policies, proposing changes that a human approves before anything is written.
Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions.
Archer (Archer Technologies LLC)
United States
Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified.
German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything.
Agentic cyber assurance and continuous compliance platform whose AI agents collect evidence, test controls, find gaps against 50+ frameworks (FISMA, NIST 800-53, FedRAMP, CMMC) and generate ATO artifacts; the platform is FedRAMP High authorized.
German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval.
Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent.
Mindlapse (Mindlapse SAS)
France
French agentic Cyber-GRC operating system whose Ernest engine runs separate planner, collector, adjudicator and writer agents to verify every governance claim (from policies, control owners or vendors) against evidence, connector signals and a cyber knowledge graph, returning sourced verdicts with confidence that are re-checked continuously and accepted or rejected by a human.
noze (noze S.r.l.)
Italy
Italian on-premise platform whose AI agents read company documents and procedures, map them to NIS2, GDPR, AI Act, CRA and DORA obligations, flag gaps and risks with the source linked, and pre-fill registers, evidence and one remediation plan; a person approves every proposal and each confirmed gap becomes an owned task.
Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.
Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do.
Auditoria (Auditoria.AI)
United States
AI agents that run accounts payable and receivable work inside finance's own ERP and inboxes: they answer vendor emails, capture and code invoices, chase accruals, monitor supplier bank, tax ID and sanctions data, reconcile vendor statements, and run collections and remittance matching within policy guardrails.
Contract lifecycle platform whose Avo AI turns each contract type into a governed agent (NDA, Vendor, Procurement and KYC Agents) that drafts, negotiates, approves and analyses within your playbooks, with every action scored and logged.
Behavox (Behavox Limited)
United Kingdom
AI agents that close routine Level 1 communications and trade-surveillance alerts on their own, using three-model consensus (any disagreement escalates to a human), with a regulator-ready Bundle Log of every decision.
Audit-engagement agents inside Caseware: the Disclosure Checklist Agent drafts cited Yes/No/N-A checklist responses from financial statements, and the Risk Suggestion Agent drafts engagement-specific risks for auditor review.
ClearContract (ClearContract ApS)
Denmark
Contract-management platform from Aarhus-based ClearContract ApS built around AI agents that work in the background. Contracts arriving by email are picked up by an intake agent that files them, extracts key terms and assigns the counterparty; a review agent checks each one against the company's own checklist, flags risks with clause citations and creates tasks; agents also watch renewals and deadlines. Nothing is signed, sent or committed without human approval.
Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows.
German legal agent that detects contract type, jurisdiction and parties, applies the company's playbook to every clause, flags deviations with page-cited reasoning and produces playbook-compliant redlines in Word, Outlook and Teams.
Cortea (AI Audit Systems GmbH)
Germany
Berlin-based AI quality layer for audit firms. Its agents review audit files end to end, cross-checking figures, disclosures and assertions across financial statements, audit reports and working papers, run substantive sample testing against the auditor's criteria and work through IFRS/UK GAAP/Companies Act disclosure checklists, documenting findings for auditor and partner sign-off.
Agentic automation platform for audit and finance in which agents run end-to-end procedures over evidence and return traceable workpapers for human review and sign-off.
Agentic AI system inside Microsoft Word that plans contract drafting and review tasks and hands them to specialised agents, with lawyer oversight.
Agents in Docusign IAM that review agreements against company standards and playbooks, suggest edits, request approvals, monitor contracts for risks and obligations, and can be built as custom agents in Agent Studio and used as steps in Workflow Builder.
episki (episki, llc)
United States
A GRC platform built around agents that draft policies, answer inbound security questionnaires, review vendors' SOC 2 and CAIQ responses, map controls, assess risks and write deterministic evidence-collection recipes. Every plan, step-run and sensitive action goes through human approvals and safety floors. Pricing is published.
Expenzing (Nexstep Infotech Pvt. Ltd.)
India
Indian spend-management vendor's AI suite (launched Sep 2, 2026). An autonomous AP Scrutinizer runs 20+ vendor-compliance, arithmetic and anomaly checks on every invoice and confidence-scores it for straight-through processing or human review. Fraud Control Agents scan expense receipts for doctored or fake documents.
Agent workforce for audit and advisory firms: agents plan engagements, run testing through to workpapers, review conclusions against evidence and draft financial statements, coordinated by Field Orchestrator.
An agentic orchestration platform for procurement and supply chain that coordinates domain-trained agents across sourcing, category management, contract lifecycle, supplier risk and compliance, and procure-to-pay, including obligation-management, clause-risk, supplier risk assessment, fraud/anomaly detection and invoice n-way matching agents.
Purpose-built legal AI agents that split large legal tasks, work in parallel and return cited, review-ready output for law firms and in-house teams.
Icertis (Icertis, Inc.)
United States
Contract AI agents in the Icertis contract intelligence platform that review third-party paper against a playbook, score risk Red/Amber/Green with plain-language explanations, generate playbook-aligned redlines in Microsoft Word, create playbooks and track obligations.
CLM platform with Ironclad Agent, a conversational front door that routes requests to specialized agents (Intake, Contract Review, Playbook, Renewal, Search, Analytics, Workflow Designer and others) working inside live contracting workflows with human-in-the-loop review.
Ivalua (Ivalua SAS)
France
IVA is a single procurement agent with full access to the Ivalua source-to-pay platform: it can set up and launch sourcing events, redline contracts with approved language, validate invoices against contract terms, and react to supplier-risk events by finding affected contracts and proposing a mitigation plan, inheriting the invoking user's permissions with every action logged.
Agentic contract review in Juro's contract platform that triages, reviews and redlines contracts (including counterparty paper in Word) against legal-team playbooks.
Kolleno (Kolleno Limited)
United Kingdom
Order-to-cash platform whose AI agents chase invoices, reconcile and match payments and monitor credit risk within the customer's credit policy. Maestro AI routes work to task-specific agents, and each agent's autonomy can be set to insights, copilot drafting or independent execution, with every action logged and restricted actions sent to existing sign-off flows.
Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations.
AI agent in Lisse's LeCHECK contract-review service (Microsoft Word add-in, from Aug 21, 2026). It runs the steps of a legal professional's contract review in order (risk check, proposed clause edits, comments, format check), and the reviewer applies its suggestions with a click.
Specialised AI agents for in-house legal teams that build review playbooks, handle intake requests, translate contracts and triage low-risk agreements, under attorney control.
Swiss legal AI workspace whose Legal Agent triages incoming contracts, reviews them against company playbooks, routes deviations above set limits to the business, Legal or Finance, and takes contracts from template draft through approvals and negotiation to signature.
Ranger is Levelpath's autonomous source-to-pay platform in which AI agents run sourcing events, generate RFPs and qualify suppliers, scan contract repositories and flag risks, continuously monitor operational and compliance signals across suppliers, and match invoices to orders and receipts, with configurable autonomy and logged actions.
Legal AI platform whose agent (Agent Lumi) marks up contracts against company playbooks and triggers approvals; its Autonomous Negotiation can run AI-to-AI contract negotiations.
Accounts payable platform that uses agentic AI to capture and code invoices, decide matches, routing and approvals, approve payments for trusted vendors, check for fraud (including AI-generated receipts) and answer supplier invoice and payment emails automatically.
Autonomous AI agents for privacy, vendor risk and AI governance: discovery, DSR fulfilment, cross-border transfer checks, assessment autofill and AI-agent posture profiles.
MNTSQ (MNTSQ, Ltd. / MNTSQ株式会社)
Japan
Legal AI agent built into the Japanese MNTSQ CLM. It agrees a review policy with the lawyer from the deal background, then reviews the contract against a playbook co-developed with Nagashima Ohno & Tsunematsu, redlines and comments directly in Microsoft Word, and drafts matter-management comments.
AI governance platform whose agents discover AI systems, assess controls against evidence, quantify AI risk in euros and investigate changes on a schedule, while decisions on the record stay with your team.
AI agent inside the Nuix Neo investigative analytics platform for legal, regulatory, investigations and compliance-monitoring matters: it picks and calls Neo tools on its own to answer plain-language questions across a case, links every answer to source items, tags items and writes findings back to the case, and records each step for audit.
Omnea (Omnea Limited)
United Kingdom
A procurement orchestration platform in which agents run intake, review, approvals, document review, supplier performance and risk mitigation from request to renewal, with autonomous sourcing, PO automation, AP and TPRM/continuous supplier monitoring modules, each agent with configurable human oversight and a full audit trail.
Optivalue.ai (Optivalue.ai SAS)
France
French platform whose agents answer incoming security questionnaires, TISAX catalogues, DDQs and tenders from the customer's own evidence with document, page and version on every answer, score and gap-check the result and draft missing documents with the team before named sign-off, while its Reach product sends questionnaires to suppliers and chases non-responders automatically.
Singapore-based RegASK monitors regulatory change in 160+ markets for life sciences and consumer products companies, and its AI agents assess impact on products and markets, assign follow-up tasks and execute subsequent actions in configurable workflows, with expert review and a recorded outcome for each run.
Agent-first AI governance platform: a knowledge graph of AI risks, controls and policies, an Agent Catalogue, and MCP servers that let customers' agents draft risk assessments.
AI agents in SpotDraft's contract platform for contract review, contract queries, clause drafting and regulatory tracking, plus VerifAI playbook review inside Microsoft Word.
Agentic AI platform for banks, asset and wealth managers with prebuilt financial agents for KYC, due diligence, RFP analysis and research, plus custom agents with governed tool and data access and audit logs.
Vertice (Vertice Group Ltd)
United Kingdom
AI negotiation agent, launched Sep 8, 2026, that runs software purchase and renewal negotiations with vendors on the customer's behalf. It builds scenario-specific strategies, drafts every exchange in the customer's voice and tracks vendor responses, either autonomously end to end or as a copilot that waits for review of each round, and it enforces customer policies such as data-protection evidence.
Wolfia (Wolfia Inc.)
United States
Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension.
AI agents for in-house legal teams that take inbound requests in Slack, Teams or email, apply the team's playbooks and return ready-to-send work, escalating non-standard matters with reasoning.
Generally available Workday Contract Lifecycle Management (ex-Evisort) agent. It reviews whole pre-signature agreements against the company playbook, flags risk and missing terms and drafts pinpoint redlines with a rationale for each; users apply the redlines. The Contract Workflow Agent is Early Access and is not covered by this listing.
No-code agent builder and prebuilt agents on Workiva's reporting, audit and GRC platform, used for finance tie-outs and roll-forwards and for evidence collection, control testing and remediation, with configurable review and approval steps.
Xelix (GSPV Ltd)
United Kingdom
UK accounts-payable control software that bolts onto ERPs and uses 20+ autonomous AI agents to catch duplicate payments, overpayments and invoice fraud before the pay-run, reconcile supplier statements and answer vendor queries.
