The right requirements.
The evidence to decide.

Obtain the current document and confirm AI Command Center, purchased features, entities, cloud regions, dates and exclusions are covered.

Collibra's company trust center lists ISO 27001 among its organizational certifications and attestations. GovernAtlas has not reviewed the underlying document or established that its precise scope covers AI Command Center; a company-wide listing must not be treated as product-specific assurance.

Confirm current module availability, mappings, evidence exports and independent certification responsibilities under the actual agreement.

The official ComplyCloud-to-Cerivo transition page describes ISO 27001 support from gap analysis toward ISMS readiness. This is workflow support under a changed brand, not a statement that ComplyCloud, Cerivo or a customer holds an ISO 27001 certificate.

Request the current certificate and scope, distinguishing Usercentrics organizational assurance from each purchased product and add-on.

Cookiebot's homepage advertises ISO 27001 and ISO 27701 certifications in its security messaging. GovernAtlas has not inspected those certificates or established their issuing body, validity, legal entity and service boundary. This is not independent certification validation of the CMP.

Inspect the current certificate and scope statement, then reconcile purchased services, hosting arrangements and responsibilities.

Dataiku's trust page states ISO 27001:2022 certification of its ISMS. GovernAtlas has not validated the certificate with its issuer or reviewed its precise entity, location, service and expiry scope. ISMS certification is not certification of a customer's models or deployment.

Request the current certificate and scope and identify which AI Platform components and operations it covers.

DataRobot's trust page states ISO 27001 certification for its ISMS. GovernAtlas has not inspected the certificate's current status, issuer, expiry, covered entities or service scope; this is a vendor assurance assertion rather than independent validation.

Assess the current 2022 mapping, exclusions and generated Statement of Applicability with the responsible ISMS owner and certification body.

Hyperproof describes ISO 27001 templates, evidence collection, version-migration support and generation of a Statement of Applicability using customer-defined controls. These are preparation and workflow capabilities, not a certification of Hyperproof or an independently completed customer audit.

Obtain the current certificates and check entities, locations, services and exclusions with the issuer where appropriate.

Immuta's trust page lists ISO 27001 and ISO 27701. GovernAtlas has not inspected the certificates, standard editions, issuing body, validity or detailed ISMS/PIMS scope; these public labels are not independent certificate validation.

Obtain the actual certificate and current scope, then verify issuer, dates, covered entity, services and locations.

Langfuse states that Langfuse Cloud is ISO 27001 certified and offers its certificate on request to Pro, Team or Enterprise customers. The captured page does not establish issuer, certificate number, expiry or detailed ISMS scope; it is not independent certificate validation or coverage of self-hosted systems.

Langfuse's compliance FAQ states that its cloud offering supports SOC 2 Type II, ISO 27001 and GDPR requirements and offers a HIPAA-ready region. These remain supplier assertions; GovernAtlas has not inspected an auditor's report or determined regulatory compliance.

Obtain the actual document and reconcile service, deployment, hosting region and customer-operated infrastructure with its scope.

LangChain's EMEA page states ISO 27001 assurance for LangSmith and directs buyers to its trust center for supporting documents. GovernAtlas has not reviewed the underlying report or certificate, current validity, exceptions or coverage across cloud, hybrid and self-hosted offerings.

Inspect the current certificate and service/entity boundaries, particularly components operated in the customer environment.

Monte Carlo lists ISO 27001 certification and links a 27001:2022 certificate from its compliance documentation. GovernAtlas has not validated the certificate's status, issuer, expiry or detailed scope; framework alignment in other security policies does not substitute for the certificate.

Reconcile the purchased module and entity with the certificate scope and Statement of Applicability; check current issuer status and exclusions.

OneTrust hosts ISO/IEC 27001:2022 certificate 1319403-5 for OT Technology, Inc., issued by Schellman Compliance, LLC on October 20, 2025 with stated expiry February 24, 2027. Its scope names OneTrust Privacy and Security & Governance in Azure/AWS production accounts. GovernAtlas read the posted certificate but has not validated current status with the issuer or established coverage of every AI Governance feature.

Request the current certificate, accredited issuer and ISMS scope; distinguish organizational certification from product certification.

Saidot's homepage states that its ISMS is ISO/IEC 27001:2022 certified. GovernAtlas preserved this vendor assertion, not the certificate; issuer, number, expiry, legal entity and covered services remain to be confirmed.