Europe

Vendors headquartered in the United Kingdom, the EU, or other European countries including the Nordics.

155 listings · HQ country as published by each vendor · Open in directory filters

Related: DORA (EU Digital Operational Resilience Act) · EU AI Act timeline

Key facts

From this dataset

  • 155 verified listings on this page, with headquarters in 1 HQ region and 19 countries.
  • Dataset version 0.1.27, generated 2026-10-27.
  • Vendors headquartered in the United Kingdom, the EU, or other European countries including the Nordics.

Cite as: Agent Index by Heritage Services, Europe AI agents, dataset v0.1.27 (https://theagentindex.io/regions/europe/)

FAQ (from this dataset)

What is listed on this region page?

Vendors headquartered in the United Kingdom, the EU, or other European countries including the Nordics. 155 verified listings from Agent Index dataset v0.1.27.

How many listings are on this page?

155 verified listings in dataset v0.1.27 (2026-10-27).

Which listings are headquartered in India, Asia-Pacific or Australia/NZ?

None of the 155 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand in the dataset.

Is this a ranking?

No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.

How many AI agents are headquartered in Europe?

155 verified listings in dataset v0.1.27 publish an HQ in Europe.

Which categories are covered?

Risk: 64; Business operations: 59; Security: 53; Compliance: 48; Code security: 18; Privacy: 4. Categories come from each listing.

Which countries are included?

HQ countries on this page: Austria, Belgium, Czech Republic, Denmark, Estonia, Finland, France, Germany, Iceland, Ireland, Italy, Lithuania, Netherlands, Norway, Portugal, Spain, Sweden, Switzerland, United Kingdom. Country is as published by each vendor.

Use-case comparisons with listings from this region: AML and transaction-monitoring AI agents · KYC and identity AI agents · AI SOC and security-analyst agents · Email security and phishing-response AI agents · AI code security agents · Contract and legal-review AI agents · Agentic pentesting AI agents · TPRM and vendor-risk AI agents · Privacy operations AI agents · AP and finance-automation AI agents · Cloud security (CNAPP) AI agents · AI governance agents and platforms · Identity governance AI agents · Enterprise agent platforms · Security questionnaire AI agents · Procurement and autonomous-sourcing AI agents

ComplyAdvantage

ComplyAdvantage

United Kingdom

Risk

AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions.

Darktrace Cyber AI Analyst

Darktrace

United Kingdom

Security New

Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams.

Luci AI Agent

Lucinity

Iceland

Risk New

Explainable AI agent for financial-crime investigations that prepares cases, runs triage and supports SAR-oriented workflows while institutions keep governance decisions.

DataSnipper Alwin

DataSnipper

Netherlands

Compliance New

Agentic automation platform for audit and finance in which agents run end-to-end procedures over evidence and return traceable workpapers for human review and sign-off.

Aikido AI AutoFix

Aikido Security

Belgium

Code security New

Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ.

Code security New

Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions.

Codacy AI Reviewer

Codacy

Portugal

Code security New

Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes.

Qevlar AI

Qevlar AI

France

Security New

Autonomous AI SOC platform that triages, enriches and investigates security alerts across SIEM/XDR, EDR and other tools and returns a documented verdict for analysts.

Security New

Sophos's managed detection and response service uses in-house AI agents for alert triage and case investigation, with Sophos analysts supervising and owning response decisions.

Business operations New

Legal AI platform whose agent (Agent Lumi) marks up contracts against company playbooks and triggers approvals; its Autonomous Negotiation can run AI-to-AI contract negotiations.

Saidot

Saidot

Finland

Compliance New

Agent-first AI governance platform: a knowledge graph of AI risks, controls and policies, an Agent Catalogue, and MCP servers that let customers' agents draft risk assessments.

Hadrian Nova (agentic pentesting)

Hadrian

Netherlands

Security SOC 2ISO 27001DORA New

On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management.

Code security New

Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps.

Stacks accounting agents

Stacks

Netherlands

Business operations New

Agentic financial close workspace where AI agents handle reconciliations, journal entries, anomaly detection and reporting while accounting teams review the work.

Legora Agent

Legora

Sweden

Business operations New

Agent at the core of Legora's legal AI platform that plans, executes, reviews and delivers multi-step legal work with autonomous tool use and firm-specific skills.

Feedzai Farol AI Agent

Feedzai

Portugal

Risk New

AI agent embedded in Feedzai's RiskOps Studio that analyses fraud rules, retrieves and summarises alert data for investigations, and drafts SAR narratives for investigator review.

Risk New

Governed agentic workforce on Fenergo's client lifecycle (CLM/KYC) platform: agents complete routine KYC steps, resolve routine screening hits, process documents and source client data, with humans approving outcomes.

Risk New

Agentic decision platform for banks and insurers with a library of pre-built agents, including Adverse Media Investigation, Business Ownership Intelligence and Sanctions and Watchlist Match Review agents, that run inside decision flows with human review.

Compliance DORA New

Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent.

Security New

Agentic AI SOC analyst inside the Sekoia SOC platform: agents autonomously investigate every alert and case, show their reasoning and produce audit-ready reports for analyst validation.

Security New

No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs.

Code security New

Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform.

Security New

Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation.

Security New

Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports.

Intruder AI Pentesting

Intruder

United Kingdom

Security New

On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings.

Juro AI Review

Juro

United Kingdom

Business operations New

Agentic contract review in Juro's contract platform that triages, reviews and redlines contracts (including counterparty paper in Word) against legal-team playbooks.

Definely Enhance

Definely

United Kingdom

Business operations New

Agentic AI system inside Microsoft Word that plans contract drafting and review tasks and hands them to specialised agents, with lawyer oversight.

Genie AI legal agents

Genie AI

United Kingdom

Business operations New

Legal AI agents that draft, review, redline and negotiate agreements against company rules, playbooks and negotiation guardrails, with published self-serve plans.

Leah (formerly ContractPodAi)

Leah (ContractPod Technologies Limited)

United Kingdom

Business operations New

Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations.

Vivox AI compliance agents (Rachel, AI compliance analyst)

Vivox AI (Digital Intelligent Solutions Ltd)

United Kingdom

Risk New

Pre-trained AI agents for AML, KYB/KYC and financial crime that take on Level 1 analyst work: sanctions and PEP alert reviews, adverse media monitoring, corporate registry and UBO analysis, and narrative report writing.

Complyance GRC AI Agents

Complyance (Securely Technology Limited)

United Kingdom

Compliance SOC 2ISO 27001HIPAACMMC New

Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires.

Fidureon compliance agents

Fidureon (CShift AB)

Sweden

Compliance ISO 27001DORA New

EU-hosted compliance platform for European companies whose agents read documents and GitHub evidence, watch security advisories, flag gaps and propose actions, with per-agent autonomy set to Propose & Wait, Hybrid or Full.

Risk New

Agent layer across the osapiens HUB that runs supplier onboarding, record validation, questionnaire pre-fill, supplier case management and risk-trend analysis for supply-chain due diligence (LkSG, CSDDD, EUDR and more), within customer-set guardrails.

Security New

Amsterdam-built autonomous SOC platform whose Virtus agents triage every alert through a 7-stage pipeline, return a verdict with confidence and evidence, and hand cases to an investigation agent, with sovereign/on-prem AI options.

YesWeHack Agentic Pentest

YesWeHack

France

Security New

On-demand pentests of external attack surface run by AI agents shaped by YesWeHack's bug-hunting expertise, with dedicated verification agents, a Pentest Manager, same-day results and reports in its vulnerability-management platform.

Security New

Continuous external pentesting in which Patrowl's AI agents correlate assets, threats and past evidence, choose the next test step every day, and route every finding through a certified pentester before it reaches you.

Business operations New

Legal AI platform with contracting, research and compliance agents, plus an Agent Studio that runs whole legal workflows from intake to approval against the organisation's playbooks.

Flank (autonomous legal agents)

Flank (Legal OS GmbH)

Germany

Business operations New

Supervised AI agents for enterprise in-house legal teams that run high-volume contracting work end-to-end (drafting, playbook review and redlining of counterparty paper, NDAs, infosec forms), with lawyers approving high-risk steps.

Wordsmith AI legal agents

Wordsmith AI

United Kingdom

Business operations New

AI agents for in-house legal teams that take inbound requests in Slack, Teams or email, apply the team's playbooks and return ready-to-send work, escalating non-standard matters with reasoning.

Business operations New

Teams of AI agents for finance shared services that capture, code, tax-validate and PO-match invoices, process order confirmations, delivery notes and dunning letters, and post validated results to the ERP with traceable reasoning.

Business operations New

Agentic AI platform for banks, asset and wealth managers with prebuilt financial agents for KYC, due diligence, RFP analysis and research, plus custom agents with governed tool and data access and audit logs.

Business operations New

Agentic automation platform that turns SOPs into self-learning production agents, with prebuilt finance agents for invoice reconciliation, accounts receivable and financial compliance and reporting.

Dotfile Autonomy (KYB/AML review agents)

Dotfile (Dotfile SAS)

France

Risk New

Specialised AI agents that pre-investigate KYB cases end to end (documents, UBOs, AML screening hits, online reputation), auto-approve routine cases under the customer's policy and escalate edge cases with a full audit trail.

Themis AI Investigator (AML/KYB due-diligence agents)

Themis (Themis International Services Ltd)

United Kingdom

Risk New

A coordinated team of AML-trained AI agents that runs enhanced due-diligence and KYB investigations in minutes: registry and web collection, officer/UBO screening, adverse-media analysis and transparent red/amber/green risk grading, with analysts keeping the final decision.

SureCloud Gracie AI agents (virtual GRC team)

SureCloud (SureCloud Limited)

United Kingdom

Compliance ISO 27001SOC 2 New

Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions.

Compliance ISO 27001 New

German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything.

New Odyssey Pegasus Compliance Agent (DSAR agent)

New Odyssey (New Odyssey Ltd)

United Kingdom

Risk New

Packaged DSAR agent that handles intake, jurisdiction deadlines, identity checkpoints, discovery across connected HRIS/CRM/ticketing/file systems, third-party PII redaction and response drafting, with a person approving the release.

Attic IVON (Agentic MDR for Microsoft 365)

Attic Security

Netherlands

Security New

Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off.

Reliance Cyber RADAR

Reliance Cyber

United Kingdom

Security New

UK agentic MDR platform on Google Security Operations with specialist AI agents for detection engineering, triage, response and self-healing, under human oversight.

Phoenix Purple (Phoenix Security)

Phoenix Security

United Kingdom

Code security New

UK AI code-security agent platform with reachability-validated scanning, PR scanning, IDE/agent integrations and an agent that writes risk-tiered fix PRs.

Security New

UK AI agents that investigate every cloud and code vulnerability with code-to-cloud context, decide exploitability and deliver fixes.

Aikido Attack AI Pentesting

Aikido Security

Belgium

Security New

Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.

Avokaado Avo AI (governed contract agents)

Avokaado (Avokaado.com OÜ)

Estonia

Business operations New

Contract lifecycle platform whose Avo AI turns each contract type into a governed agent (NDA, Vendor, Procurement and KYC Agents) that drafts, negotiates, approves and analyses within your playbooks, with every action scored and logged.

Legartis Legal Agent (agentic Legal AI Workspace)

Legartis (Legartis Technology AG)

Switzerland

Business operations New

Swiss legal AI workspace whose Legal Agent triages incoming contracts, reviews them against company playbooks, routes deviations above set limits to the business, Legal or Finance, and takes contracts from template draft through approvals and negotiation to signature.

Business operations New

Agentic ERP for multi-entity finance teams: executive agents (Bill, Contract, Accrual) do accounting work, audit agents check their output and instructions against written accounting and approval policies, and materiality-based approval controls decide what needs a controller or CFO.

Business operations New

Accounts payable platform that uses agentic AI to capture and code invoices, decide matches, routing and approvals, approve payments for trusted vendors, check for fraud (including AI-generated receipts) and answer supplier invoice and payment emails automatically.

SAP Joule Agents and Joule Studio

SAP (SAP SE)

Germany

Business operations New

Prebuilt SAP AI agents that execute multistep finance, HR, procurement and service tasks across SAP and non-SAP systems, coordinated by role-based Joule Assistants, with custom agents built in Joule Studio and governed in SAP AI Agent Hub.

Business operations New

Workflow automation platform where agents are first-class: you describe an agent, n8n drafts its instructions and tools, and agents with triggers and memory call 500+ integrations and existing workflows, alone or as coordinated multi-agent systems. It can be self-hosted.

Halo AI Agents (service management with FedRAMP GRC module)

Halo (Halo Service Solutions Limited)

United Kingdom

Business operations New

ITSM/ESM platform (formerly HaloITSM) with AI agents: conversational agents for end users and fulfillers, and process agents (Dispatch, 1st Line Support, Major Incident, Knowledge, Change Management) that act on their own within role-based permissions. The platform, including a FedRAMP/CMMC GRC module, is FedRAMP 20x Moderate.

Risk New

Compliance platform for onboarding, monitoring and case work where AI agents run sanctions, PEP, adverse-media and alert investigations, resolve ownership (UBO) gaps and review documents, returning a cited verdict and recommended action for an analyst to decide.

Shufti Transaction Trust Monitoring (agentic FRAML engine)

Shufti (Shufti Pro Limited)

United Kingdom

Risk New

Agentic fraud and AML (FRAML) transaction monitoring in which governed AI agents score transactions, triage and investigate alerts and draft regulator-format SAR/STR reports, with the MLRO approving every filing.

Noru Agentic Compliance (GRC agents)

Noru (The GRC Company AB)

Sweden

Compliance ISO 27001SOC 2DORA New

EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept.

Egerie Jerry (agentic Cyber GRC platform)

Egerie (EGERIE SOFTWARE SAS)

France

Compliance ISO 27001DORA New

European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked.

Risk New

Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed.

Business operations New

German legal agent that detects contract type, jurisdiction and parties, applies the company's playbook to every clause, flags deviations with page-cited reasoning and produces playbook-compliant redlines in Word, Outlook and Teams.

Business operations New

French accounting platform's Autopilot runs activated bookkeeping workflows end to end (document requests and reminders, document processing, bank reconciliation, VAT preparation) and pre-reviews year-end diligence with documented conclusions, while accountants supervise exceptions from a control centre.

Security New

Finnish human-risk platform whose Respond module automatically investigates every employee-reported email, groups related reports into one campaign incident, suppresses safe and duplicate reports, and removes confirmed malicious messages from all affected inboxes without waiting for an analyst.

Security New

Belgian human-risk platform with a suite of AI agents that run the phishing training programme (orchestration, simulation, brand, supplier and deepfake simulation agents), triage every reported email with a verdict and a drafted reply, and check clicked links in an isolated environment in real time. New content needs admin approval and every action is logged.

Risk New

KYB, KYC, AML and third-party due-diligence platform where the VERA agent runs end-to-end investigations (ownership chain, business activity, sanctions and adverse media) into a cited, policy-mapped report, and LUMA handles AML screening and ongoing monitoring, with analysts approving high-risk decisions.

KaitoSec AI agents (agentic ISMS and GRC platform)

KaitoSec (KaitoSec GmbH)

Germany

Compliance ISO 27001DORA New

German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval.

Compliance DORA New

French agentic Cyber-GRC operating system whose Ernest engine runs separate planner, collector, adjudicator and writer agents to verify every governance claim (from policies, control owners or vendors) against evidence, connector signals and a cyber knowledge graph, returning sourced verdicts with confidence that are re-checked continuously and accepted or rejected by a human.

Compliance DORA New

Italian on-premise platform whose AI agents read company documents and procedures, map them to NIS2, GDPR, AI Act, CRA and DORA obligations, flag gaps and risks with the source linked, and pre-fill registers, evidence and one remediation plan; a person approves every proposal and each confirmed gap becomes an owned task.

Risk DORA New

AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor.

Security DORA New

German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval.

Security New

French platform whose agents answer incoming security questionnaires, TISAX catalogues, DDQs and tenders from the customer's own evidence with document, page and version on every answer, score and gap-check the result and draft missing documents with the team before named sign-off, while its Reach product sends questionnaires to suppliers and chases non-responders automatically.

Security DORA New

German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.

Business operations New

Agent built into the Zefort contract-management platform that takes assigned contract work (reviewing and redlining agreements, comparing contract sets, finding risks or missing information) and turns findings into suggested updates to metadata, parties, binders, tasks and reminders that a person approves before they are applied.

Business operations New

Purpose-built finance agents inside the Serrala Finance Platform that interpret context, decide the next best action within defined policies and execute AP, AR and payments tasks across systems (for example resolving AP price variances and matching and allocating unmatched incoming payments), with human-in-the-loop oversight and an auditable record of every action.

Risk New

Rules-based AML, customer screening, payment screening and market-abuse software for banks and insurers in which AI agents do the research, analysis and documentation work (for example adverse-media checks on screening hits) inside the platform's governance, with the compliance analyst making the final decision.

Risk New

French KYB/KYC compliance platform whose agent Léon pre-audits pending customer files, has KYC and KYB 'workers' review them and recommend the next step from the firm's past decisions, and launches specialised agents in parallel for identity verification, sanctions/PEP screening and customer follow-ups, with analysts making the final decision.

Compliance DORA New

Swedish compliance execution platform for regulated firms that turns a company's own policies into a requirement registry, checks it against DORA, NIS 2, GDPR or customer demands, and hands routine work to agents (contracts checked in batches, evidence collected on schedule, updates computed when a rule changes), with a person approving every result.

Business operations New

Procurement sourcing platform whose AI orchestrator, Kai, takes plain-language requests and hands them to specialised agents that run sourcing events end to end (intake, supplier selection, event creation, multi-round bidding and award) under rules the procurement team sets.

Risk New

An autonomous financial-crime compliance agent on Elucidate's risk-intelligence platform for banks and payment institutions. It screens and monitors transactions across SWIFT and ISO 20022, triages adverse media, traces hidden ownership and layering, investigates alerts to disposition and drafts CDD reports.

Security New

Autonomous penetration testing built into the Dublin-based Edgescan platform, launched October 7, 2026. A team of narrow AI agents plans, adapts, chains vulnerabilities and validates real impact on web applications, using Edgescan's existing asset context and findings, while a deterministic 'Harness' enforces scope, permissions, approvals and allowed actions. Findings land alongside Edgescan's DAST, PTaaS and ASM results.

AISLE (autonomous vulnerability discovery, triage and verified-fix agents)

AISLE (Aisle s.r.o. / Aisle Inc.)

Czech Republic

Code security New

Prague-headquartered AI code-security platform in which thousands of agents analyse a codebase in parallel for exploitable vulnerabilities, fix agents write patches, and agentic verification builds the repo and runs tests before opening a pull request for human merge. October 2026 added agent-driven proof of exploitability against running web apps and APIs. Cohere signed a letter of intent to acquire AISLE on Oct 15, 2026.

Security DORA New

Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy.

Business operations New

IVA is a single procurement agent with full access to the Ivalua source-to-pay platform: it can set up and launch sourcing events, redline contracts with approved language, validate invoices against contract terms, and react to supplier-risk events by finding affected contracts and proposing a mitigation plan, inheriting the invoking user's permissions with every action logged.

Business operations New

A procurement orchestration platform in which agents run intake, review, approvals, document review, supplier performance and risk mitigation from request to renewal, with autonomous sourcing, PO automation, AP and TPRM/continuous supplier monitoring modules, each agent with configurable human oversight and a full audit trail.

Security New

Netherlands-headquartered continuous threat exposure management (CTEM) platform, KnightGuard, whose Vizier AI layer uses coordinated AI agents (CTI analyst, SOC analyst, red and blue team, ITOps) to monitor the attack surface, turn threat intel into deployable detections, validate them and orchestrate response.

Code security New

French AI code security platform (SAST, SCA, IaC, container and secret scanning) whose Cybe AutoFix agent reads the code graph, rewrites vulnerable lines or picks the safest dependency upgrade, tests the change in isolation and opens a bot-signed, CI-gated pull request for a human to merge.

Business operations New

Order-to-cash (accounts receivable) platform with prebuilt Aimie Agents that run collections, cash application, dispute and credit-risk work, including autonomous outbound calling. Customer Agents built in Agent Builder Studio automate company-specific O2C processes under policy controls and human oversight.

Business operations New

Procurement agent for manufacturers. It works on CAD, PLM, ERP, supplier and pricing data to plan and run technical purchasing from need analysis to order: bundling demand, finding suppliers, preparing RFQs, comparing quotes and placing orders. Teams can give it natural-language commands.

Risk New

AI agents inside the WealthAi operating system for wealth managers that run client onboarding and KYC end-to-end: they collect client information and documents, spot what is missing, generate forms, and start identity verification, PEP and sanctions screening, KYC and account checks, bringing in a person only where review or approval is needed.

Compliance New

Berlin-based AI quality layer for audit firms. Its agents review audit files end to end, cross-checking figures, disclosures and assertions across financial statements, audit reports and working papers, run substantive sample testing against the auditor's criteria and work through IFRS/UK GAAP/Companies Act disclosure checklists, documenting findings for auditor and partner sign-off.

Business operations New

Generally available since Oct 14, 2026: an agentic operating system for German tax-advisory firms (Steuerkanzleien). AI agents work on the firm's DATEV data in the background. They check client bookkeeping for missing receipts, unusual costs and missing tax codes, flag missing year-end closing entries, calculate BWA metrics and email clients to request missing documents, and changes go back to DATEV only after the firm approves them.

Business operations New

Order-to-cash platform whose AI agents chase invoices, reconcile and match payments and monitor credit risk within the customer's credit policy. Maestro AI routes work to task-specific agents, and each agent's autonomy can be set to insights, copilot drafting or independent execution, with every action logged and restricted actions sent to existing sign-off flows.

Business operations New

Treasury platform agent that runs routine finance work in the background, including transaction categorisation and enrichment, forecast-to-actual reconciliation, bank-to-invoice matching, GL postings and PSP-to-sales-order matching. Every action is logged and reversible, and it presents judgement calls with context for one-click approve, modify or reject.

Vertice Ana (Autonomous Negotiation Agent for software purchases)

Vertice (Vertice Group Ltd)

United Kingdom

Business operations New

AI negotiation agent, launched Sep 8, 2026, that runs software purchase and renewal negotiations with vendors on the customer's behalf. It builds scenario-specific strategies, drafts every exchange in the customer's voice and tracks vendor responses, either autonomously end to end or as a copilot that waits for review of each round, and it enforces customer policies such as data-protection evidence.

Business operations New

Zurich sourcing and eAuction platform whose Spark agents build RFx questionnaires, bid sheets and cost formulas, analyse an RFQ and auto-generate the right auction setup, turn plain-language rules into award scenarios, summarise supplier bids and score proposals. Supplier invitations, reminders and data validation are automated around them.

Compliance New

Berlin agentic compliance platform in which six AI agents run recurring ISO 27001, SOC 2, NIS2, TISAX and DORA work on a schedule: planning a first certification, weekly gap audits against connected systems, drafting policies, collecting evidence, drafting security-questionnaire answers and checking vendor contracts and DPAs, with every result logged and approved by a person.

Security New

Paris-based agentic pentesting platform in which the Émile orchestrator coordinates 12-60 specialist attack agents (auth bypass, IDOR, injection chains, business logic, privilege escalation) against web apps and APIs, reports only findings proven with a replayable proof of concept, and re-tests fixes, with EU-sovereign hosting.

Security New

Self-serve automated pentesting from Brno in which an AI agent maps a web app's attack surface, forms hypotheses, chains findings into multi-step attack scenarios (auth bypass, broken access control, exposed secrets) and writes up only what it can demonstrate, with published monthly plans and EU/GDPR data processing.

Business operations New

Munich-based procurement platform for manufacturers whose AI agents request and update supplier documents autonomously, read order confirmations and match them to purchase orders (escalating only deviations), convert and compare supplier quotes, verify compliance documents (REACH, ESG, CBAM, LkSG) and surface savings opportunities.

Business operations New

Berlin-based purchase-to-pay platform for mid-sized companies whose AI agents turn free-text, PDF or email requests into complete purchase requisitions, pick preferred suppliers and cheapest compliant offers, process invoices with automatic 3-way matching, check deviations and escalate, and assign cost centres and GL accounts before ERP/DATEV export.

Risk New

Vilnius-registered 'agentic compliance' GDPR platform whose AI agents write and keep the Article 30 register current as the business changes, find and assess every processor's DPA against Article 28, prepare DPIAs, draft breach-notification decisions and turn data-subject requests into deadline-tracked case records, routing judgement calls to the privacy team.

Security New

Berlin security platform whose specialist AI agents triage alerts, assemble investigations, run continuous threat hunts, execute containment and update compliance reporting across connected tools such as CrowdStrike, Splunk, Elastic, SentinelOne, Microsoft Sentinel and Wiz, with autonomy levels, escalation thresholds and approval gates set per agent and per action type.

Code security New

London AI code reviewer for GitHub and GitLab that reviews every pull request within minutes, flags security issues and suggests commit-ready fixes, fails the check on high-severity security findings so merging can be blocked, auto-approves low-risk PRs with no blocking findings, and scans whole repositories every night for vulnerable code, exposed secrets, misconfigured infrastructure and vulnerable dependencies.

Security New

Rome security-testing platform that runs SAST, SCA, IaC/secrets, DAST, vulnerability assessment and penetration testing as one pipeline, in which AI agents autonomously chain vulnerabilities and safely run exploits to prove which findings are exploitable, available as SaaS, self-hosted or an air-gapped appliance.

Business operations New

Amsterdam accounts-payable platform whose agents pick up new invoices from mailboxes, drives and Peppol, route each to the right entity, code every line to account, VAT code and cost centre using the customer's rules and booking history, check it against the supplier contract and post booking-ready entries to DATEV, Exact Online or Twinfield, with payment runs prepared after VAT-ID and IBAN checks.

SEQUENTA KI-Kontierungsagent (AI invoice-coding agent with DATEV export)

SEQUENTA (Sequenta UG (haftungsbeschränkt))

Germany

Business operations New

Berlin bookkeeping agent for German SMEs and the self-employed that collects incoming invoices by upload, email or e-invoice, extracts the data, applies hard-coded German VAT rules (§13b reverse charge, low-value-asset limits, intra-EU acquisitions), researches unclear receipts on its own and produces complete booking entries (account, contra account, BU key, text) for DATEV-EXTF export, flagging uncertain items.

Business operations New

Munich-headquartered modular AI-agent platform for direct and indirect procurement in manufacturing: a sourcing agent drafts and sends RFQs, chases suppliers and lines up quotes; a negotiation agent benchmarks each offer and drafts the negotiation email for approval; an order-check agent matches order confirmations against POs, writes correct ones back to the ERP and clears deviations with suppliers.

Business operations New

London-registered agentic procurement automation platform whose agents run tactical and tail-spend sourcing events on autopilot, finding suppliers, collecting bids and analysing proposals, and negotiate commercial terms with suppliers autonomously within a negotiation playbook the buyer configures, alongside chat-based intake and SOW-generation agents.

Business operations New

Helsinki agentic contract workspace for in-house legal, sales and procurement teams: an agent drafts contracts from emails, call notes or deal terms using the team's templates, reads each counterparty redline against the playbook and past deals and writes the counter, remembers what was conceded in earlier rounds, and runs renewal reminders, assignments and post-signature filing on its own.

Risk New

Agentic AI product from Sopra Steria's German company for anti-financial-crime teams: it takes transaction-monitoring alerts and runs the first-level investigation itself (gathering case information from approved sources, analysing facts and patterns in the alert's context, documenting results, sources and reasoning) and prepares a recommended action, while the final case decision stays with the analyst.

Risk New

French AI agent for accounting firms' anti-money-laundering (LCB-FT) client onboarding: from a SIREN it pulls the company and directors from the national business register, sends the client a secure portal link and chases missing documents, checks beneficial owners against the RBE register, asset-freeze lists, FATF/EU country risk and document consistency, screens for PEPs, and assembles a traced due-diligence file for the firm to decide.

Risk New

Dutch AI agent that runs Wwft client due diligence for accounting and tax firms: it analyses client files, UBO structures and legal constructions, checks identities against PEP and sanctions lists, pulls audit information from the Dutch UBO register and Trade Register, flags profile changes and schedules re-reviews, and delivers audit-ready KYC files with a source reference for every conclusion, while a person makes the decision.

Risk New

Milan AML product in which an AI agent runs Italian 'adeguata verifica' (customer due diligence) end to end: it analyses each onboarding document for relevance and extracts the data, traces beneficial owners through chains of shell companies using private documents and public databases, screens PEP, EU/UN sanctions and internal watchlists, proposes a reasoned risk classification and logs every step in a traceable report; a companion agent analyses transactions to surface real behavioural anomalies and cut false positives.

Risk New

Rotterdam 'digital employee' platform whose KYC agents request, validate and classify customer documents in real time, guide customers through verification by voice or chat, run sanctions, adverse-media and PEP checks before onboarding completes, and close routine KYC checks without manual review, routing exceptions to analysts with pre-extracted data and logging every decision for supervisors.

Code security New

Manchester software-change security platform that risk-scores every code change, automatically approves changes that fall within the customer's own policy and escalates the rest, then sends sandboxed AI pentest agents against high-risk changes and logs every decision and tool call as an audit-ready change record.

Business operations New

Austrian document-agent platform whose AI agents take incoming invoices (PDF, e-invoice, Swiss QR bill) through capture, master-data matching, mandatory-field and PO/delivery-note checks to a booking proposal in the ERP, passing clear cases straight through and sending only exceptions, with the reason and source location, to a person.

Gradient Labs KYB Agent (business-verification agent for financial services)

Gradient Labs (Gradient Labs Limited)

United Kingdom

Risk New

London AI-agent company for financial services whose KYB Agent, in production, checks each business-verification document against the customer's internal policy, requests anything missing from the customer, and verifies the business before routing it to onboarding; it runs alongside Gradient Labs' disputes, lending/collections and customer-service agents.

Security New

Agentic AI layer for Filigran's open-source threat-intelligence (OpenCTI) and exposure-validation (OpenAEV) platforms: pre-built agents turn threat intelligence into hunting packages, detection rules and attack scenarios, and an autonomous attack-chaining orchestrator plans, runs and adapts an AI penetration test against an authorized environment, with optional human approval for sensitive actions.

Security New

UK agentic SOC platform that sits on top of existing SIEM, cloud, endpoint and threat-intelligence tools: it automatically triages every new alert, runs AI-agent follow-up investigations across connected tools, writes the incident summary and can act within per-workflow authority levels (advise, approve, act), including in on-premises or fully air-gapped deployments.

Security New

London-based agentic SOC product: AVA investigates every alert from SIEM/EDR/XDR sources by testing malicious and benign hypotheses against the customer's environment and closes it with a defensible verdict (true positive, false positive or inconclusive with the missing evidence named), producing an audit-ready investigation report for enterprise SOCs and MSSP/MDR teams.

Security New

German autonomous pentesting product for web apps and APIs: given a target URL, scope and optional source code, its AI agents carry out real exploitation, a separate agent re-tests every finding against the live app to weed out false positives, and a compliance-ready report with proof-of-exploit and remediation steps arrives within 24 hours; continuous monthly runs mark findings fixed, regressed or new.

Business operations New

French accounts-receivable platform that connects to a company's ERP or billing tool and runs cash collection itself. It finds the right contacts and follows up from day one after the due date by email, SMS, voice and WhatsApp. It reads and classifies every customer reply (promise to pay, dispute, payment difficulty), pauses or escalates disputes, proposes payment plans and reconciles payments.

Security New

UK offensive-security product that deploys autonomous attack agents starting from the outside with no credentials or source code: specialist agents investigate in parallel, share discoveries on a persistent investigation graph, prove exploitable paths across applications, identities and data, and retest within authorised scope as the environment changes.

Security New

Italian AI-native offensive platform product: Arcangelo continuously maps internal and external attack surfaces, then runs adaptive multi-stage agentic penetration tests that plan and pivot like an attacker, with potentially intrusive exploitation kept human-approved and auditable.

Security New

French identity and SaaS-management product whose custom AI agents automate joiner-mover-leaver provisioning, offboarding and other identity actions in web apps even when no API, SCIM or SAML is available, using a browser-based agent that interprets the admin UI and executes the workflow steps.

Business operations New

Italian procurement platform for manufacturers that runs as a workforce of 30+ specialised AI agents in five teams. The agents capture and route purchase requests, run RFQs and chase supplier replies, onboard and risk-score suppliers and keep certificates current, and send POs, check order confirmations and update the ERP, acting within approval thresholds the customer sets.

Business operations New

Italian procurement platform that runs a network of AI agents on a company's own supplier data plus verified external sources. The agents scout and contact suppliers, send qualification questionnaires and check certificates, dispatch RFIs/RFQs, chase replies, compare responses and keep supplier records updated, while buyers keep approvals and decisions.

Business operations New

French finance-operations platform with 40+ ready-to-use AI agents (plus a builder) for accounts payable, receivables, treasury, accounting, internal controls and close. Agents pull invoices from email, extract and normalise data, run 3-way matching and price-list controls against the ERP, reconcile bank flows and can trigger actions in the accounting system on schedules, routing exceptions and edge cases to people.

Code security New

German AppSec product from Düsseldorf: a team of agents audits repositories (SAST, secrets, SCA, IaC, CI/CD) and cloud accounts, triages signals so only confirmed findings surface, pentests running apps inside a verified scope with a separate agent reproducing every finding, reviews pull requests with a merge-blocking status check, and opens fix pull requests that run your tests but never merge themselves.

Security New

Italian agent for mid-sized companies and NIS2 entities without an in-house SOC: after verifying domain control it continuously discovers assets and assesses network, web apps and APIs, correlates findings with EPSS and CISA KEV, confirms exploitability with automated validation pentests, ranks risks by business impact and prepares NIS2, DORA and ISO 27001 reports; the team decides what to fix.

Security New

Berlin identity-governance vendor's AI agent: once access is approved under the customer's policies, Agent Cake provisions seats in supported apps on the admin's behalf, removes all accounts during offboarding, and lets employees request access conversationally in Slack, inside a platform that discovers apps and AI agents beyond SSO.

Napier AI Continuum responsible agents (screening alert triage and auto-clearing)

Napier AI (Napier Technologies Limited)

United Kingdom

Risk New

Configurable AI agents in London-based Napier AI's Continuum financial-crime platform. In Client Screening and Transaction Screening, compliance teams build and tailor 'responsible agents' in a no-code sandbox and choose how much autonomy to hand over, from flagging sanctions, PEP and adverse-media matches for review to clearing known patterns automatically before they reach a queue, with every agent action explained and captured in the audit trail.

Business operations New

Contract-management platform from Aarhus-based ClearContract ApS built around AI agents that work in the background. Contracts arriving by email are picked up by an intake agent that files them, extracts key terms and assigns the counterparty; a review agent checks each one against the company's own checklist, flags risks with clause citations and creates tasks; agents also watch renewals and deadlines. Nothing is signed, sent or committed without human approval.

trail Governance Agents (GRC and AI governance agents)

trail (trail GmbH, part of Collibra since Oct 2026)

Germany

Compliance EU AI ActISO 42001 New

Munich-based trail's Governance Agents run GRC busywork in the background: they read your project files and sources to collect and link evidence, assess controls, classify systems, run risk and vendor assessments and draft policies, proposing changes that a human approves before anything is written.