At a Glance:
VerifyWise is a source available AI governance platform with on‑premises hosting, role‑based access control, AI‑generated compliance answers, and built‑in support for EU AI Act, ISO 42001, NIST AI RMF, and ISO 27001 frameworks.
Overview:
VerifyWise is a source available AI governance platform that helps organizations manage AI use safely and responsibly. It provides a centralized environment for handling AI‑related risks, compliance frameworks, vendor assessments, model inventories, and internal AI policies. The platform supports AI‑generated answers to compliance and assessment questions to speed up audits. It includes modules for shadow AI detection, AI agent discovery, LLM evaluations, and incident management. VerifyWise is designed to be hosted on‑premises or in a private cloud, with full source code access for security audits and customization. The platform also offers a public AI trust center, approval workflows, desktop notifications, and detailed reporting with PDF and DOCX export.
Key Decision Points:
Hosting and deployment: Can be hosted on‑premises or in a private cloud, with Docker and Kubernetes deployment options.
Access to source code: Full source code is available under a source available license (BSL 1.1), with dual licensing options for enterprises.
Governance frameworks: Provides built‑in support for EU AI Act, ISO 42001, NIST AI RMF, and ISO 27001, including risk and control mappings.
Extensibility and automation: Supports plugins, automations triggered by entity changes or periodic reports, and webhook integrations.
User management: Supports user registration, authentication, role‑based access control, and authentication via Google OAuth2 and Entra ID (enterprise edition).
Core Features:
AI‑generated compliance answers: Produces AI‑drafted responses to compliance and assessment questions to support faster audits.
Compliance framework mappings: Provides risk and control mappings aligned with EU AI Act, ISO 42001, NIST AI RMF, and ISO 27001.
Vendor and model risk management: Tracks vendors, vendor risks, model inventory, and model‑related risks.
Shadow AI and AI agent discovery: Detects shadow AI usage and discovers AI agents within the organization.
AI trust center: Offers a public‑facing view for transparency in AI governance practices.
LLM evaluations and arena: Includes a complete module for LLM evaluations and an LLM arena.
AI incident management: Supports recording and managing AI‑related incidents.
Use Cases:
Compliance teams performing AI governance audits against EU AI Act, ISO 42001, NIST AI RMF, or ISO 27001 can use VerifyWise to manage evidence, generate answers, and produce reports.
Organizations that require on‑premises or private cloud deployment can host VerifyWise in their own environment while maintaining full access to the source code for customization and security reviews.
Security and risk teams monitoring shadow AI usage and AI agent activity can use the detection and discovery modules to identify unmanaged AI components.
Enterprises needing structured AI policy management and approval workflows can use the policy manager, task tracking, and approval request features.
Open-Source Alternative Value:
VerifyWise provides source‑available access to a full AI governance platform with on‑premises hosting, Docker and Kubernetes deployment, and direct source code availability for security audits and customization. It includes governance framework mappings, AI‑generated compliance support, and modules for incident management, shadow AI detection, and LLM evaluation. The plugin support and automation capabilities offer flexibility for organizations that want to adapt the tool to internal processes without relying on a closed, cloud‑only governance service.
