Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.
ISO/IEC 27001
Quick answer
45 verified listings are tagged for ISO 27001 in Agent Index dataset v0.1.27 (generated 2026-10-27).
International standard for information security management systems (ISMS), commonly required by global enterprise customers.
Framework tags indicate relevance for evaluation, not certification. This is not a ranking.
International standard for information security management systems (ISMS), commonly required by global enterprise customers.
Many compliance automation and GRC platforms map controls to ISO 27001 Annex A.
Key facts
From this dataset
- 45 verified listings on this page, with headquarters in 7 HQ regions and 11 countries.
- Dataset version 0.1.27, generated 2026-10-27.
- International standard for information security management systems (ISMS), commonly required by global enterprise customers.
Cite as: Agent Index by Heritage Services, ISO/IEC 27001, dataset v0.1.27 (https://theagentindex.io/frameworks/iso27001/)
FAQ (from this dataset)
What is listed on this framework hub?
International standard for information security management systems (ISMS), commonly required by global enterprise customers. 45 verified listings from Agent Index dataset v0.1.27.
How many listings are on this page?
45 verified listings in dataset v0.1.27 (2026-10-27).
Which listings are headquartered in India, Asia-Pacific or Australia/NZ?
5 of 45 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: 6clicks Hailey AI (Australia), Scrut Automation (India), Sprinto (India), UpGuard (Australia), VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) (Singapore).
Is this a ranking?
No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.
Related: ISO/IEC 27001:2022 readiness checklist · SOC 2 to ISO/IEC 27001 · ISO calendar-year audit rule.
Use-case comparisons with 2+ listings tagged ISO 27001: TPRM and vendor-risk AI agents · Privacy operations AI agents · US public-sector and FedRAMP AI agents · Cloud security (CNAPP) AI agents · AI governance agents and platforms · Security questionnaire AI agents
Related audit-firm listings (facts, not endorsements): ISO 27001 auditors in the United States · ISO 27001 auditors in Germany · ISO 27001 auditors in the United Kingdom · ISO 27001 auditors in Japan · ISO 27001 auditors in the Netherlands · ISO 27001 auditors in Australia · ISO 27001 auditors in India · ISO 27001 auditors in Brazil · ISO 27001 auditors in Canada · ISO 27001 auditors in Ireland
Agents tagged for ISO 27001
45 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.
Autonomous Trust Platform with governed AI agents that detect change across systems, vendors, access and AI use, then refresh evidence, run vendor due diligence, prepare audits and close control gaps, with humans approving material decisions.
AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles.
Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.
Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.
Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs.
Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks.
Compliance platform with published product pricing pages for building and maintaining security certification programs.
Featured
Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
AI GRC platform (Risk Cloud) with GRC Agents that act under human supervision for third-party risk, AI governance, enterprise risk and business continuity.
Featured
Developer-first application security platform. Snyk Agent Fix validates AI-suggested fixes for Snyk Code findings, and the Evo Agentic AppSec agents (scanning, dependency firewall, security review, remediation and secrets) run Snyk's engines as tools. Several of these agents are still in preview.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests.
Cyber risk and third-party risk management platform with published CRPM pricing page.
Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation.
Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.
Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata).
Enterprise automation platform with Autopilot and agentic automation for business operations and process orchestration.
Generative AI assistance across the ServiceNow platform for IT, employee and customer workflows.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers.
Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform.
On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management.
Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.
Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring.
AI GRC platform whose agents collect and map evidence, test controls continuously, assess policies against frameworks, run natural-language 'TI Playbooks' and answer security questionnaires.
Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized.
CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer.
Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires.
EU-hosted compliance platform for European companies whose agents read documents and GitHub evidence, watch security advisories, flag gaps and propose actions, with per-agent autonomy set to Propose & Wait, Hybrid or Full.
Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions.
German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything.
EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept.
European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked.
German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval.
CITSmart GRC.S (GRC + SecOps platform with AI agents that check deadlines and execute response actions)
Central IT (CITSmart)
Brazil
Brazilian GRC-plus-security-operations platform from Central IT: alerts from proxy, DNS, XDR, e-mail and identity tools are correlated and prioritised by AI, AI agents check deadlines, priorities and owners for each compliance or security demand, and AI agents execute checks and response actions in the environment (Cognitive Workflow), with LGPD, ISO 27001, NIST, CIS Controls 8 and ISO 42001 mapped out of the box.
Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit.
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Related alternatives (relevance grouping, not a ranking): Secureframe alternatives · Sprinto alternatives · Vanta alternatives · Drata alternatives · Thoropass alternatives · Scrut alternatives
Best ISO 27001 AI agents (mechanical listing order, not a ranking) · All frameworks