AI Governance

AI governance tools split into two layers: policy platforms that inventory and assess AI systems, and runtime layers that enforce policy on live traffic. This guide compares five tools, including Bifrost, and maps them to the NIST AI RMF, EU AI Act, and ISO 42001.

TL;DR * AI governance tools fall into six categories: policy registries, model monitoring tools, data security controls, cloud provider consoles, AI gateways, and endpoint agents. Most enterprises need more than one of them. * Policy registries document AI risk and produce audit evidence, but they cannot stop a request in flight.

A guide to building an enterprise AI governance framework, from NIST AI RMF, ISO 42001 and EU AI Act requirements to runtime controls.

A register of AI security risks for engineering teams, mapped to the OWASP Top 10 for LLM Applications with the enforcement layer for each.

A guide to AI security posture management for LLM applications, covering how AI-SPM differs from CSPM and DSPM and its four pillars.

A guide to HIPAA requirements for LLM applications, covering the five paths PHI takes into model traffic and the gateway control for each.