Overview:
VerifyWise is a source-available AI governance platform designed for organizations that need to manage AI usage with compliance and security measures. It provides tools for auditing, risk management, and policy enforcement, with the option to host on-premises or in a private cloud. The platform is aimed at businesses and teams that require oversight of their AI systems and need to align with regulatory frameworks like the EU AI Act and ISO 42001.
Core Features:
On-premises hosting: The application can be deployed on-premises or in a private cloud, with support for Docker and Kubernetes.
Role-based access control (RBAC): Supports user registration, authentication, and permission management for different user roles.
Compliance and risk management: Offers risk and control mappings for EU AI Act, ISO 42001, NIST AI RMF, and ISO 27001, along with a vendor risk module.
AI detection and discovery: Includes an AI Detection Module for scanning code repositories to identify AI-generated content, plus Shadow AI detection and AI agent discovery.
Automations and plugins: Supports automation workflows triggered by entity changes, scheduled reports, or webhooks, and a plugin system with over 15 available plugins.
Reporting and documentation: Provides detailed reports exportable to PDF and DOCX, along with an evidence center with folder structure.
Use Cases:
Compliance officers can use the platform to map controls to multiple AI regulations and generate audit-ready reports.
Risk managers can track AI use cases, vendor risks, and model inventories through dedicated dashboards and global tasks.
IT administrators can deploy or self-host the platform using Docker or Kubernetes, configure OAuth2 authentication, and manage user permissions via RBAC.
Governance teams can manage internal AI policies, log AI incidents, and maintain an AI trust center for public transparency.
Why It Matters:
As a source-available platform for AI governance, VerifyWise offers organizations the ability to self-host and inspect the code for transparency and customization. Its support for automations, plugins, and integration with risk repositories (MIT and IBM) provides a flexible foundation for managing AI compliance workflows. The platform also addresses specific needs like Shadow AI detection and AI agent discovery, which are relevant for enterprises seeking control over deployed AI systems.
