Designed to support emerging AI governance frameworks.
Not “certified.” Not “compliant.” Verun provides the operational controls and evidence that map to the requirements in the frameworks enterprises are being measured against.
Framework alignment
Each framework defines operational requirements. Verun supplies the runtime control and the evidence that satisfies them.
Gartner AI TRiSM
- Runtime controls
- Human oversight
EU AI Act
- Human intervention
- Traceability
- Logging
ISO/IEC 42001
- Governance controls
- Monitoring
SOC 2
- Audit evidence
NIST AI RMF
- Risk management
- Continuous monitoring
OWASP LLM Top 10
- Excessive agency mitigation
- Tool execution control
The controls behind the checkmarks
Each requirement maps to a concrete capability that operates at runtime, on every action.
Runtime controls & human oversight
Deterministic policy enforcement on every action, with held actions routed to a human review workflow and instant escalation to Slack, Teams, or webhook.
Traceability & logging
Every decision produces a signed, tamper-evident receipt — which layer decided, why, under which policy version — replayable as evidence.
Risk management & monitoring
Per-agent behavioral baselines and mission anchoring continuously surface anomalies and off-mission drift before an action executes.
Excessive agency mitigation
Default-deny: undefined actions don't proceed. Sensitive capabilities run through controlled, governed paths.
Tool execution control
Consequential tool-calls are intercepted pre-execution and evaluated against allow/block lists, thresholds, and mandatory-approval rules.
Audit evidence
Governance Evidence Packs bundle receipts, approvals, policy versions, and replay data into exportable JSON/PDF for auditors.
An honest framing
Verun does not replace certifications or legal assessments. It provides operational controls and evidence that support these frameworks. Specific regulatory mappings should be formally verified for your jurisdiction and deployment before being relied upon as compliance claims.
Governance your auditors can read.
See how Verun turns every agent action into defensible evidence.