Tangerin AI
Tangerin AI is the independent AI governance platform that discovers, assesses, governs and verifies AI use across the entire company, from any vendor. Headquartered in Brazil and operating globally, serving customers in Portuguese, English and Spanish. It answers what most companies cannot: which AI tools, IT-approved or not (Shadow AI), are used, by whom, at what data risk, and with what evidence for an auditor. Collected via a lightweight endpoint agent (Windows, macOS, Linux) or agentless ingestion of NGFW, SSE and SIEM logs. Every signal resolves against a proprietary catalog of thousands of AI tools, recording data risk, processing country, retention policy and training use. Each tool is scoped as allowed, restricted or prohibited by policy; employees digitally sign the AI usage policy; compliance covers 20+ frameworks - NIST AI RMF, SOC 2, LGPD, ISO 42001, EU AI Act and more. Never collects conversation content, prompts or files.
Learn more about Tangerin AI
OneTrust AI Governance
OneTrust AI Governance is AI governance tool built to protect the ROI of AI by translating AI risk into enforceable controls, helping teams govern well and move fast. It aligns enterprise governance with technical reality so organizations can scale AI faster, reduce risk, and maintain trust as AI systems evolve in production. It helps teams catalog AI systems and assess risk by tracking models, datasets, agents, and vendors in a central inventory, assigning ownership and lifecycle status, and understanding component dependencies. It standardizes AI risk identification using global frameworks such as the EU AI Act, NIST, and ISO 42001, with automated workflows for risk tiering by use case, system, or component, plus mapped risk and control frameworks for ongoing compliance. OneTrust streamlines approvals, attestations, scoping, evidence collection, and audit-ready reporting through configurable intake and approval workflows.
Learn more about OneTrust AI Governance
Drata
Drata is an agentic trust management platform that helps organizations automate compliance, manage internal and third-party risk, and continuously demonstrate their security posture. The platform combines Enterprise GRC, compliance automation, Trust Center capabilities, security questionnaire automation, third-party risk management, AI agent governance, and integrations within a centralized environment. Drata automates activities such as control mapping, evidence collection, continuous control monitoring, risk identification, and guided remediation to help organizations maintain audit readiness across multiple frameworks. Its AI capabilities can draft questionnaire responses from an organization's knowledge base, assess third-party vendors, collect vendor documentation, and automate follow-up activities. Organizations can also use Drata's Trust Center to securely share security information and documents with customers, prospects, and other stakeholders.
Learn more about Drata
Kosmoy
Kosmoy is an AI governance and management platform for enterprise AI in production. It connects four layers of control: inventory, monitoring, governance and action control. Register AI systems, models, agents and MCP servers with owners and risk assessments. Monitor usage, costs and behaviour across applications. Apply access controls, guardrails, routing and logging to LLM, MCP and agent-to-agent traffic through an AI Gateway. Use Action Capsule to isolate autonomous agent actions with runtime controls and a kill switch. Deploy in your own Kubernetes environment, in the cloud or on premises. Built for AI platform, security, risk and compliance teams that need shared operational evidence and control.
Learn more about Kosmoy