Platform
Connect once. Map everything. Evidence continuously.
regulAIt has four surfaces: an inventory of every model, agent and access path; a policy engine that speaks in controls; an evidence store that never goes stale; and oversight that runs while the systems run.
Architecture
Three moves, in order
Connect
Read-only connectors into the systems that already hold the truth. No agents to deploy, no data to move.
- identity providers
- cloud & data platforms
- model gateways
- agent runtimes
Map
One inventory, mapped to the controls of every framework you answer to — once, not per audit.
- control library
- framework mappings
- policy engine
- ownership graph
Evidence
Each control collects its own proof continuously, timestamped and immutable, ready to export.
- evidence store
- attestation packs
- finding workflow
- audit exports
How it works
Four steps, then it runs on its own
Connect your systems
Read-only credentials into your identity provider, cloud accounts, data platforms and model gateways. Under an hour for the first three.
Let it build the inventory
Every model, agent, dataset, grant and owner discovered and put in one register — usually including several nobody had recorded.
Choose your frameworks
Pick the frameworks you answer to. regulAIt maps your inventory to their controls and tells you what is failing today.
Leave it running
Evidence keeps collecting, drift raises findings, and the audit export is current whenever someone asks for it.
In the product
Three surfaces you will live in
Inventory
- claims-triage-agentagent
- gpt-4o · prod gatewaymodel
- svc-underwritingservice acct
- analytics-warehousedata
Every model, agent and grant in one register
Control coverage
- SOC 296%
- ISO 2700191%
- EU AI Act74%
- ISO 4200168%
Coverage per framework, recalculated hourly
Evidence log
- 09:41AC-2.3 evidence collected · 412 sessions
- 09:38finding opened · IA-5.1 credential age 94d
- 09:31claims-triage-agent scope changed
- 09:12CM-8.2 inventory reconciled · 64 agents
- 08:58attestation pack exported · Q3 SOC 2
Immutable, timestamped, export-ready
Interface shown is illustrative
Planned connectors
Design partners choose the first four we build
Read-only, metadata only. Nothing is deployed inside your estate.
- Okta
- Entra ID
- AWS
- Azure
- GCP
- Snowflake
- Databricks
- BigQuery
- OpenAI
- Anthropic
- Bedrock
- Vertex
- LangSmith
- GitHub
- Jira
- ServiceNow
- Splunk
- Vanta
Bring your control set. We will map it live.
Book a demoSee it against your own frameworks
Thirty minutes, your control set, no sales sequence afterwards.