AI risk & compliance management
UK-founded AI governance platform providing a system of record for AI systems, models, datasets and governance decisions, customisable intake by system type and risk level, assessment tracking against EU AI Act, ISO 42001 and NIST AI RMF, and dashboards summarising assessment results.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗AI risk & compliance management · Runtime authorization & controls
Useful conversation with: Chief risk officer, AI governance lead, Compliance manager.
Demonstrate a configurable intake for a high-risk system and how completed assessments roll up into the governance dashboard and shareable reports.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
Homepage states a centralized system of record where AI systems, models, datasets and governance decisions are documented, assessed and auditable, with customizable intake using configurable fields and reusable templates tailored by system type and risk level, and support for EU AI Act, ISO 42001 and NIST RMF.
Limit: Marketing page. The claimed '50+ integrations' is not backed by a published integration list, and framework support does not establish compliance.
Vendor claim
A UK Government AI assurance techniques entry describes Enzai's AI Governance Hub collating results of every assessment run, recording each model or system as in full, partial or no compliance with regulation, updating in real time, and letting organisations choose with whom to share assessment information.
Limit: gov.uk entry is a vendor-supplied case study; compliance labels are the vendor's own scoring, not an external audit.
Vendor claim
A vendor product page describes agentic AI governance features including autonomy risk tiering, action whitelisting, escalation routing, multi-agent visibility and controls mapped to the OWASP Agentic Top 10.
Limit: Enforcement mechanism, integration points and whether these features are generally available are not evidenced; treat as marketing description.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction