Compliance & Security

Enterprise-Ready AI Tools

Shortlists of AI tools that meet enterprise security requirements — each entry is verified against the vendor's own trust or security page, with a source link so you can confirm it yourself. No pay-to-list.

SOC 2130 verified

Independent SOC 2 report covering security, availability, and confidentiality.

View SOC 2 tools

GDPR103 verified

Published DPA and documented EU data handling for GDPR.

View GDPR tools

HIPAA72 verified

Vendors that will sign a BAA for HIPAA-regulated (PHI) workloads.

View HIPAA tools

FedRAMP9 verified

FedRAMP-authorized (or in-process) for US government use.

View FedRAMP tools

SSO / SAML78 verified

Enterprise single sign-on via SAML or OIDC, often with SCIM.

View SSO / SAML tools

Self-hosted

Open-source AI tools you can run on your own infrastructure for full data control.

View self-hosted tools

How we verify

392 verified entries across these lists. A tool appears on a list only after we confirm the claim on the vendor's own trust, security, or DPA page — never from reputation. "Not listed" means we haven't verified it, not that it lacks the certification. These pages are informational and are not legal or compliance advice; confirm current status with the vendor. See our review methodology.