vendor · audit

Holistic AI

Holistic AI is an end-to-end enterprise AI governance platform that automatically detects models, agents, APIs, pipelines and workflows across AWS, Azure, GitHub, Databricks and 20+ integrations, performs AI red teaming, and enforces deployment gates, approval workflows and kill switches through Guardian Agents with human-in-the-loop oversight. It provides built-in frameworks for the EU AI Act, NIST AI RMF, ISO 42001 and NYC Local Law 144, and was ranked #1 for the AI Risk and Compliance Use Case in Gartner's Critical Capabilities for AI Governance Platforms.

www.holisticai.comupdated Aug 1, 2026view as JSON

7 fields evidenced · 38 with no public information. Every value below links to the document it came from and the date we checked it.

Trust gap

How this is scored

Runtime governance

3/3

Are scope, spend, and authority enforced while the agent runs?

Deployment gates, approval workflows and kill switches are enforced at run time by Guardian Agents that enforce policies autonomously with human-in-the-loop oversight, which is enforcement of scope and authority at run time.

Audit trail

2/3

Is there a tamper-evident record of what it actually did?

Continuous audit trails, evidence collection and compliance reporting are described as audit-ready. The page checked does not claim the record is tamper-evident or hash-chained, so it falls short of 3.

Compliance

2/3

Are compliance obligations attached per engagement?

Built-in frameworks for the EU AI Act, NIST AI RMF, ISO 42001 and NYC Local Law 144 with automated control mapping and gap analysis are published. These are frameworks the platform maps against rather than certifications it holds per engagement, so it falls short of 3.

Outcome settlement

0/3

Does payment depend on a verified result?

No public evidence found on the page checked. No outcome-conditioned payment terms are described.

How this gap gets closed →

Insurance & indemnity

0/3

Can the deployment be insured, and is the customer indemnified?

No public evidence found on the page checked. No carrier, cover, limits or customer indemnity are named.

How this gap gets closed →

Assurance

Insurance available: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Insurance carriers: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Coverage limits: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Indemnification: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Liability cap: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Audit trail: Provides continuous audit trails and evidence collection for compliance reporting
“Continuous audit trails, evidence collection, and compliance reporting — audit-ready from day one, not day-before-audit”
www.holisticai.com · checked Jul 31, 2026
Tamper-evident log: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Explainability: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Runtime governance: Enforces deployment gates, approval workflows and kill switches at runtime via "Guardian Agents", with human-in-the-loop oversight
“Deployment gates, approval workflows, and kill switches — powered by Guardian Agents that enforce policies autonomously with human-in-the-loop oversight”
www.holisticai.com · checked Jul 31, 2026
Permission scopes: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Compliance certifications: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Regulatory alignment: Built-in compliance mapping for EU AI Act, NIST AI RMF, ISO 42001, and NYC Local Law 144
“Built-in frameworks for EU AI Act, NIST AI RMF, ISO 42001, and NYC Local Law 144 with automated control mapping and gap analysis”
www.holisticai.com · checked Jul 31, 2026
Outcome-based pricing: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Settlement mechanism: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Dispute process: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
SLA terms: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Evaluation coverage: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Service type: End-to-end enterprise AI governance platform
“The end-to-end AI governance platform trusted by global enterprises running AI at scale.”
www.holisticai.com · checked Jul 31, 2026
Regulatory status: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Underwriting backing: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Client types: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this

Safety

Safety evaluations: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Red teaming: Performs AI red teaming: dynamic adversarial testing, jailbreak resistance, prompt-injection detection, across 40+ test types
“AI red teaming with dynamic adversarial testing, jailbreak resistance, and prompt injection detection — plus 40+ AI/ML test types covering performance, robustness, explainability, and safety”
www.holisticai.com · checked Jul 31, 2026
Safety policy: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Usage restrictions: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Model or system card: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Incident reporting: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Third-party evaluations: Ranked #1 for AI Risk and Compliance Use Case in a Gartner evaluation of AI governance platforms
“New Holistic AI ranked #1 for AI Risk and Compliance Use Case Receives highest ranking for AI Risk and Compliance Use Case in companion Gartner evaluation, Critical Capabilities for AI Governance Platforms.”
www.holisticai.com · checked Jul 31, 2026
Data handling: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this

Practicality

Pricing model: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Price point: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Availability: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Deployment options: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Integrations: Detects models, agents, APIs, pipelines and workflows across AWS, Azure, GitHub, Databricks and 20+ other integrations
“Automatically detect models, agents, APIs, pipelines, and workflows across AWS, Azure, GitHub, Databricks, and 20+ integrations”
www.holisticai.com · checked Jul 31, 2026
Supported regions: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Support model: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this

Ecosystem

Protocols supported: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
API access: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Open source: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Marketplace presence: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this

Impact

User base: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Deployment scale: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Target sectors: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
High-risk domains: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this
Documented incidents: no public information
www.holisticai.com · checked Jul 31, 2026 · source did not state this