VerifyWise is a source-available AI governance platform that automates audits and regulatory compliance work, including AI risk management aligned with the EU AI Act. It tracks AI projects and models, maps evidence against 25-plus frameworks such as ISO/IEC 42001, ISO 27001, and the NIST AI Risk Management Framework, and produces auditor-ready reports. It can be self-hosted with Docker or Kubernetes or consumed as a hosted Trial and Enterprise service.[1][2]
Quick verdict
Teams facing EU AI Act or ISO 42001 obligations who want a self-hostable governance platform will get the most from VerifyWise. Its framework breadth, automated evidence, and audit reporting compress real compliance work, but the BSL 1.1 license, sales-led enterprise pricing, and unverified repository signals mean OSI-only or self-serve buyers should weigh the limits first.[1][2][3][4]
What VerifyWise does
EU AI Act risk management Risk workflows follow the EU AI Act lifecycle with risk scoring, mitigation tracking, and residual-risk assessment attached to each AI project.[1]
25-plus compliance frameworks Beyond the EU AI Act, the platform supports ISO/IEC 42001, ISO/IEC 27001, ISO 9001, NIST AI RMF, and more than twenty additional frameworks from one control set.[1]
Automated evidence collection Evidence gathering, control mapping, and gap analysis run continuously, replacing manual screenshot chasing before audits.[1]
Project-based AI inventory Each AI project gets an inventory of its models, datasets, and uses; the homepage reports 100-plus models managed across 50-plus organizations.[1]
Audit management and reports Audit scheduling, finding tracking, and 60-plus report templates turn collected evidence into auditor-ready outputs.[1][2]
Access control and enterprise auth Role-based access control is standard, with Google OAuth2 and Microsoft Entra ID plus OIDC single sign-on on Enterprise tiers.[1][2][3]
Who it fits
Enterprises facing the EU AI Act Regulated teams that must show Act-aligned risk management and documentation get the core value: the risk lifecycle and framework mapping exist for exactly that audit conversation.[1][2]
Teams consolidating AI and ISO audits Organizations already running ISO 27001 programs can cover AI frameworks in the same evidence base instead of buying a second governance tool.[1]
Self-hosting compliance shops Teams whose policy keeps governance data on their own infrastructure can run the full platform on-premises with Docker or Kubernetes.[1][2]
Limitations to weigh
Source-available, not open source The BSL 1.1 license restricts production use to the licensed terms until it converts to Apache-2.0 in 2029, so OSI-only shops cannot treat it as open source today.[1]
Sales-led enterprise pricing Only the Trial tier is free and self-serve; Enterprise capabilities including SSO, SLA, and dedicated support require a custom quote.[1]
Repository signals not yet verified At intake time the platform's repository identity and metric snapshots were still pending worker verification, so star and activity figures remain repository observations, not verified catalogue facts.[1]
No public API documented The repository documents outgoing Automations webhooks but no inbound public API, so teams planning deep programmatic integration should confirm API availability before committing.[1]
Alternatives and compatibility
Comp AI for SOC 2-led audits Comp AI automates evidence collection and audit preparation for SOC 2, ISO 27001, GDPR, and HIPAA. Teams whose audit is purely SOC 2 or HIPAA should evaluate it alongside VerifyWise, since VerifyWise differentiates on AI-specific frameworks rather than traditional audit breadth.[1]
Questions worth asking
How much does VerifyWise cost per month?
No monthly rate is published on the pricing page checked October 13, 2026. The Trial plan is $0 and both Enterprise and Enterprise Plus are Custom-priced, so expect a sales-led quote for paid tiers. The free Trial tier plus paid upgrades is a freemium shape.[1]
Can I self-host VerifyWise?
Is VerifyWise really open source?
VerifyWise is source-available under the Business Source License 1.1, which converts to Apache-2.0 on the Change Date of May 29, 2029. It is not under an OSI-approved license today, which matters if your policy requires open-source licensing.[1]
Should we evaluate VerifyWise or Comp AI?
VerifyWise covers AI governance broadly (EU AI Act risk, ISO/IEC 42001, NIST AI RMF) plus ISO 27001, while Comp AI focuses on SOC 2, ISO 27001, GDPR, and HIPAA audit automation. A team whose audit is purely SOC 2 should evaluate Comp AI first; a team facing the EU AI Act or consolidating AI frameworks with ISO 27001 should evaluate VerifyWise first.[1]
Sources and editorial review
Source research. Reviewed on October 13, 2026. Written by Sanjib Sah. AI assisted; reviewed by a human editor.
We have not run or tested this product.
- VerifyWise official site
official · Observed October 13, 2026
Official homepage: AI governance platform automating audits and EU AI Act compliance; features, 25-plus frameworks, 100-plus models, 60-plus report templates, RBAC, on-premises/cloud hosting, GitHub repo link.
- VerifyWise pricing
official · Observed October 13, 2026
Pricing page: Trial $0, Enterprise and Enterprise Plus Custom; on-premises or cloud hosting; OIDC SSO on Enterprise tiers; phone/email support, CSM, 99.9% SLA, onboarding.
- verifywise-ai/verifywise README
official · Observed October 13, 2026
Repository README: EU AI Act risk management, NIST AI RMF, ISO 42001/27001/9001 support, automated evidence, RBAC, React/Node/Postgres/Redis/Python stack, Docker Compose install, Kubernetes production guide, Google OAuth2/Entra ID.
- verifywise-ai/verifywise LICENSE.md
official · Observed October 13, 2026
LICENSE.md: Business Source License 1.1, Licensor VerifyWise Inc., Change Date 2029-05-29, Change License Apache-2.0.
- VerifyWise Y Combinator profile
official · Observed October 13, 2026
YC W25 profile: VerifyWise, verifywise.ai, founded 2024 by Bosch alumni, $555K raised, 23 people, active.
Compared with these products
No explicit proprietary baseline is recorded.