Free report · Q4 2026 · CC BY 4.0

State of AI Compliance & Audit (Q4 2026): AI agents and audit firms

410 AI agents and 516 Verified · 11 registry-listed audit firms, analysed from the Agent Index open dataset. Facts only. Not a ranking or a market census.

Download the full report (CSV + printable HTML) Printable HTML

Cite as: Agent Index (https://theagentindex.io) — DOI: 10.5281/zenodo.23604511. Agents v0.1.27, auditors v0.1.32.

Unlock the download

Subscribe free to download the CSV and printable HTML. 100% free through Q1 2027.

We use your email only to send the newsletter and remember this unlock. See our privacy policy.

1. Key numbers

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0) · Open dataset · Methodology

2. Agents by category and top 15 tasks

security · 117 (28.5%)
business-ops · 109 (26.6%)
risk · 90 (22.0%)
compliance · 55 (13.4%)
code-security · 39 (9.5%)

Top 15 tasks

workflow-automation · 159 (38.8%)
alert-triage · 76 (18.5%)
remediation · 75 (18.3%)
case-investigation · 72 (17.6%)
process-automation · 71 (17.3%)
aml · 57 (13.9%)
incident-response · 56 (13.7%)
security-operations · 54 (13.2%)
vendor-risk · 53 (12.9%)
threat-detection · 50 (12.2%)
kyc · 49 (12.0%)
risk-assessment · 49 (12.0%)
appsec · 48 (11.7%)
evidence-collection · 47 (11.5%)
vulnerability-management · 47 (11.5%)

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0) · Open dataset · Methodology

3. Where agents are built

HQ country (top 15)

United States · 173 (42.2%)
United Kingdom · 41 (10.0%)
Germany · 35 (8.5%)
India · 24 (5.9%)
France · 22 (5.4%)
Israel · 16 (3.9%)
Japan · 11 (2.7%)
Canada · 10 (2.4%)
Netherlands · 9 (2.2%)
Italy · 8 (2.0%)
Australia · 7 (1.7%)
Singapore · 7 (1.7%)
Switzerland · 6 (1.5%)
Belgium · 5 (1.2%)
Sweden · 5 (1.2%)

HQ region

76 agents have a non-empty india_relevance field.

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0) · Open dataset · Methodology

4. Pricing transparency

62 agents (15.1%) have a pricing_model value that includes “published”. Remaining stored values are shown as stored. No price ranges are invented.

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0) · Open dataset · Methodology

5. Government authorizations

72 agents have a non-empty authorizations list. Programs are grouped exactly as stored.

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0) · Open dataset · Methodology

6. Frameworks (vendor-stated)

Top framework tags on agents. These are vendor-stated relevance tags, not certifications. Related reading: EU AI Act timeline after the Digital Omnibus.

iso27001 · 45 (11.0%)
soc2 · 37 (9.0%)
hipaa · 24 (5.9%)
tx-ramp · 24 (5.9%)
dora · 20 (4.9%)
fedramp · 19 (4.6%)
cmmc · 10 (2.4%)
dpdp · 10 (2.4%)
govramp · 4 (1.0%)
cert-in · 1 (0.2%)
EU AI Act · 1 (0.2%)
ISO 42001 · 1 (0.2%)

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0) · Open dataset · Methodology

7. Audit firms by framework and country

63 firms carry 3 or more framework tags.

Firms by HQ country

Top accreditation registries

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0) · Open dataset · Methodology

8. Methodology and limitations

Listings follow verified-only rules. This is not a market census. There are no rankings or scores. Each record has a last_checked date. Confirm current status on the named registry or vendor page. See the methodology and open dataset.

Source: Agent Index open dataset v0.1.27 / auditors v0.1.32, DOI 10.5281/zenodo.23604511 (CC BY 4.0)