AI Governance Platform
Modulos is the AI governance platform built for teams that need to operationalize EU AI Act compliance, manage AI risk, and prove conformity across regulatory frameworks. AI agents do the heavy lifting: quantifying risk in money, assessing controls, and mapping evidence. Run them once or on a schedule, across your whole portfolio. Your team reviews and decides.
How the Platform Fits Together
Manage AI governance, risk, and compliance from one platform, with AI agents that streamline the work.
Governance
Run AI governance like an operating system
Project dashboards, AI lifecycle tracking, ownership workflows, and complete audit trails.
Risk
Quantify AI risk, allocate budgets, track mitigation
Organization-wide risk overview, taxonomy limits, and risk-to-control mapping.
Compliance
Multi-framework compliance without duplicate work
One control satisfies many frameworks. Evidence browser with full audit trail.
Agents
Human-in-the-loop AI agents for GRC work
Scout Assistant, evidence automation, control assessments — all with human oversight.
The Governance Graph
The real framework library, drawn as one graph. Click two or more frameworks to see the controls they share: implement a control once and it counts toward every framework that maps it.
The Modulos governance graph
Framework library v1.0.31: click frameworks to compare their overlap
AI Agents That Do the Work
Human-in-the-loop AI agents automate the heavy lifting while you stay in control. Each one runs on demand or on a schedule, so a single assessment becomes a continuous practice.
Scout Assistant
Ask compliance questions in plain English. Scout knows your organization, projects, and where your evidence gaps are.
- Understands your controls, risks, and compliance status
- Searches your GitHub, Confluence, Google Drive for evidence
- Watch reasoning unfold in real-time with source citations
Control Assessment Agent
Automatically evaluates control implementation and generates structured assessments with a readiness score.
- Readiness scoring with gap identification
- Prioritized recommendations with citations
Evidence Agent
Upload documents and the agent generates metadata, summaries, and control mapping suggestions. You review before accepting.
Risk Agent
Automates risk quantification using Fermi estimation. Investigates context, calculates risk values, and audits its own reasoning before delivering results.
Easy Integration with your AI Stack
Connect Scout to your docs and repos. Feed operational metrics into runtime testing.
GitHub
Code repositories
Bitbucket
Code repositories
Azure
Cloud platform
AWS
Cloud platform
Google Drive
Document storage
Confluence
Wiki & documentation
Jira
Project management
Snowflake
Data warehouse queries
Prometheus
Infrastructure monitoring
Datadog
Observability platform
Langfuse
LLM observability
MLflow
ML experiment tracking
Jupyter
Notebook analysis
Vijil
AI security testing
Claude Console
Claude Code usage
Copilot Studio
Agent governance
Push operational metrics from CI/CD pipelines with the Python SDK. Metrics feed runtime tests that link directly to controls.
from modulos_client.testing import log_metric
# Push a fairness metric from your CI pipeline
log_metric(
metric_id="demographic_parity",
value=0.92,
project_id="loan-approval-model"
)Runtime Tests
Verify that controls hold in production. Every test result links to the control it validates and becomes audit-ready evidence.
Metric Tests
Set pass/fail conditions on operational metrics from Prometheus, Datadog, AWS CloudWatch, and other sources. Tests run on a daily, weekly, or monthly schedule, and failures notify control owners automatically.
Agent Tests
Define compliance checks in natural language, as a test objective with pass criteria, and an AI agent executes them across connected systems. Multi-step, cross-system inspections that go beyond simple thresholds, producing structured verdicts with evidence and reasoning.
Enterprise-Ready Security
Built for organizations with serious compliance requirements.
SOC 2 Type II
Independently audited security controls
Data Encryption
AES-256 at rest, TLS 1.3 in transit
Data Residency
EU, US, UAE, Singapore & more regions
SSO & RBAC
8 distinct roles across organization and project scope, with separation of duties enforced by default
Flexible Deployment Solutions
Choose the deployment model that fits your organization's security, compliance, and operational needs.
SaaS
Best for: SMEs and enterprises with standard cloud requirements.
Quick to deploy and easy to scale. Ideal for teams that want to move fast without managing infrastructure. Available through cloud marketplaces.
Private Cloud / VPC
Best for: Enterprises with stricter data protection needs or complex infrastructure setups.
Run Modulos in your own dedicated cloud environment for enhanced security, data control, and compliance.
Trusted by leading organizations
Modulos customers include A-ZN, SCSK, ETH, PwC, Berner Fachhochschule, Mobile Health, Serai, CertX, aDigital, JobCloud, Xayn, Beyond Gravity, Armasuisse.
FAQ about the platform
Because someone will ask for the record: a regulator, an auditor, a customer running due diligence, or your own board. Modulos is that system of record. Every AI system is registered with an owner and a lifecycle stage, every control is mapped to the frameworks that require it, every piece of evidence stays attached to the claim it supports, and every risk carries a monetary value. When the question comes, you export the answer instead of assembling it.
No, we are an AI governance platform. Data governance manages data quality, privacy, and lifecycle. AI governance addresses what makes AI systems different: model risk, algorithmic fairness, transparency, human oversight, and AI-specific regulation like the EU AI Act and ISO/IEC 42001. The two meet where your AI processes personal data, and Modulos maps those overlaps rather than replacing your data governance stack.
No. The platform connects to your existing tools and repositories to gather evidence and metrics, and your models and training data stay where they are. For organizations with strict requirements, Modulos runs as SaaS, private cloud, or VPC deployment.
The EU AI Act has been in force since August 2024 and applies in stages: prohibitions since February 2025, GPAI obligations since August 2025, general application and Article 50 transparency duties since August 2026, and high-risk system obligations from December 2027 following the 2026 Omnibus. Modulos ships requirement templates built on the published text, at organization level and per AI application, and framework mappings are updated as CEN/CENELEC harmonized standards and Commission guidance land.
AI-specific frameworks include the EU AI Act, ISO/IEC 42001, NIST AI RMF, OWASP Top 10 for LLM and for Agentic Applications, UAE AI Ethics, MAS FEAT, and Singapore’s Model AI Governance Framework for Agentic AI. Alongside them sit GDPR, NIS2, DORA, ISO/IEC 27001, and ISO/IEC 27701. The governance graph maps controls across all of them, so one control implemented once counts everywhere it applies.
See the Platform on Your Own Terms
Walk through the governance graph in a demo: how one control counts across the EU AI Act, ISO/IEC 42001, and NIST AI RMF, and where the agents hand your team hours back. Comparing vendors first? Start with the buyer's guide.