Credo AI

Active, privately held.

Sources 1, 2, 3 · checked 2026-11-08

• AI registry cataloging AI systems, agents, models, and vendors, with shadow AI detection, risk classification, and dependency mapping
• Continuous, context-based risk assessment with an agentic risk and control library; drift alerts from connected observability tools
• Policy packs with regulatory content, policy-to-code translation, compliance mapping, and audit evidence (EU AI Act, NIST AI RMF, ISO 42001, OMB M-25, Colorado ADMT, NAIC AI)
• Vendor Registry and vendor risk assessment pages for third-party AI
• Integrations stated for Databricks, MLflow, Snowflake, AWS, Azure, ServiceNow, Jira, Confluence, Slack, and GitHub; public SDK

Sources 1, 2, 3 · checked 2026-11-08

• Enterprises building a central AI registry that spans internal, vendor, and agentic AI
• Teams that want policy packs mapped to US state, federal, and EU requirements

Sources 1, 2, 3 · checked 2026-11-08

Contact vendor (talk to an expert / request demo)

Sources 1, 2, 3 · checked 2026-11-08

• SOC 2 Type II (security, availability, confidentiality; independent AICPA-certified auditor)

ISO 42001 appears on the site as a supported policy pack, not as a Credo AI certification. Trust Center (trust.credo.ai) is a JavaScript portal; certification listing confirmed from the SOC 2 page instead.

Listed as stated by the vendor. Scope can differ by product or subsidiary; request current reports.

Sources 1, 2, 3 · checked 2026-11-08

• No public pricing
• Agent Governor is listed as a research preview; confirm availability
• Vendor risk workflow is not described in detail on the homepage; ask for a walkthrough

Sources 1, 2, 3 · checked 2026-11-08