Drata
Drata is an agentic trust management platform that helps organizations automate compliance, manage internal and third-party risk, and continuously demonstrate their security posture. The platform combines Enterprise GRC, compliance automation, Trust Center capabilities, security questionnaire automation, third-party risk management, AI agent governance, and integrations within a centralized environment. Drata automates activities such as control mapping, evidence collection, continuous control monitoring, risk identification, and guided remediation to help organizations maintain audit readiness across multiple frameworks. Its AI capabilities can draft questionnaire responses from an organization's knowledge base, assess third-party vendors, collect vendor documentation, and automate follow-up activities. Organizations can also use Drata's Trust Center to securely share security information and documents with customers, prospects, and other stakeholders.
Learn more
IBM watsonx.governance
While not all models are created equal, every model needs governance to drive responsible and ethical decision-making throughout the business. IBM® watsonx.governance™ toolkit for AI governance allows you to direct, manage and monitor your organization’s AI activities. It employs software automation to strengthen your ability to mitigate risks, manage regulatory requirements and address ethical concerns for both generative AI and machine learning (ML) models. Access automated and scalable governance, risk and compliance tools that cover operational risk, policy management, compliance, financial management, IT governance and internal or external audits. Proactively detect and mitigate model risks while translating AI regulations into enforceable policies for automatic enforcement.
Learn more
VerifyWise
VerifyWise is an open-source AI governance platform that helps organizations document, assess, and manage their AI systems in a transparent and structured way. Built to support compliance with frameworks like ISO/IEC 42001, NIST AI RMF, and the EU AI Act, it offers a centralized registry where teams can log every AI system, along with its purpose, model type, deployment details, and risk classification. Whether it’s a large language model, a computer vision system, or a rules-based tool, VerifyWise helps you keep track of everything in one place.
The platform’s open-source nature means it’s fully self-hostable and adaptable. Organizations can audit the code, contribute improvements, and extend functionality to meet specific needs. Security is built-in, with automated checks for credential leaks, license issues, and dependency vulnerabilities. It supports external contributions while maintaining high code quality standards, making it ideal for both public and private sector use.
Learn more
ClearOPS
ClearOPS helps buyers and sellers manage their vendors and satisfy due diligence requirements. ClearOPS is a full-circle third-party risk platform. With ClearOPS you can track and monitor all of your vendors, send assessments and upload evidence, and respond to their customer's vendor management processes. Vendor security questionnaires are like a hot potato, no one wants to do them. So our A.I. takes the first pass saving massive amounts of time. As a system of record, you never have to watch the information about your own business walk out the door. You won the customer, now what? Well, you have to retain them, and maintaining that healthy trust is what we are all about. ClearOPS manages privacy and security operations information so that it is easily accessible and up to date. Simple third-party risk management software solution. Inspire your colleagues with empowerment and assess your vendors on your schedule.
Learn more
