No. We are a compliance management platform: we get you audit-ready so an accredited certification body can issue your ISO 42001 certificate. We are not the certification body.

Most GRC tooling tells you what is missing and leaves the work to you. GoCompliant ships agents that do the work: drafting policies, mapping controls across frameworks and surfacing gaps as they appear.

Never. We only ingest metadata: model cards, dataset descriptors, evaluation results, and the documents you explicitly upload. Your IP stays in your environment.

A mix of leading commercial and open-source models, selected per task and hosted in our own environment. Premium customers can bring their own key for full data residency control.

Yes. Business and Premium plans include a 14-day free trial, no card required to start. Starter is free forever for solo compliance work.

Each tenant's data is isolated at the row level, and that scoping is applied centrally to every query rather than left to individual features. We share the detail, and our testing against it, under NDA during security review.

SSO via SAML and OIDC, plus SCIM 2.0 user provisioning, are included on the Premium plan and available as an add-on for Business. Coming Q3 2026.