Verisum

Verisum is a cloud service for governing AI decisions, tracking operational signals and preserving evidence through web tools and APIs. It is best suited to organisations building an AI governance programme, especially those preparing for audit or working in regulated settings. Its breadth is compelling, but capacity varies sharply by plan and its special-category-data restriction may rule it out for some work.

Overview

Verisum groups its capabilities into Govern, Monitor and Prove. Govern covers organisation surveys, AI system and vendor registers, policy generation, shadow-AI tracking, model registries, regulatory feeds and compliance frameworks. Monitor brings drift monitoring, incident logging, escalation workflows, runtime signals, staff declarations and team management. Prove adds public verification, decision ledgers, incident locks, attestations, approvals, Trust Exchange, provenance graphs and on-chain anchoring.

This scope connects planning and policy work with monitoring and evidence rather than stopping at an inventory. That is useful for teams that need governance to continue into operations, though the large differences in system, seat and user limits mean the right tier depends on the size and formality of the programme.

Key features

AI system inventory, risk assessments, policies and controls sit alongside the UK AI Code, EU AI Act, NIST RMF and ISO 42001 frameworks. The combination gives teams several frameworks to work against and tools to maintain governance records around their AI systems.

Verisum's HAPP Protocol provides REST APIs for approvals, attestations, provenance, exchanges, incident locks and public verification. For organisations that need to connect evidence workflows to other services, that API scope is a meaningful advantage over a governance process confined to the web interface.

Verify anchors attestations, incident locks and provenance records on-chain for independent verification. HAPP anchors Merkle roots to EVM-compatible blockchains, including Ethereum, Polygon and Arbitrum. This is a distinctive fit for organisations that need externally verifiable proof; teams with no such requirement may not need this layer.

Verisum states that data is encrypted in transit with TLS 1.2 or above and at rest with AES-256 through its managed database provider. Its DPA says the service is not designed for UK GDPR special category data and customers must not submit it. That restriction is a material suitability check before bringing sensitive records into the service.

Pricing

Verisum uses a freemium model, with paid plans from £129/mo. There is no free trial, so the permanent free tier is the way to assess a limited use case before committing to a paid plan.

The free tier includes public verification but not the broader capacity of the paid plans. Core offers the lowest paid entry point, while Assure raises monthly policy capacity and removes the vendor and incident ceilings; Verify is the tier that explicitly adds API access and SSO/SAML. Professional services are also offered for readiness assessments, continuous governance programmes, AI policy and compliance packs, and cryptographic proof setup.

Platforms

Verisum is available through web and API, with cloud deployment. The API is particularly relevant to teams connecting governance and evidence workflows with other services.

Who it's for

Core is aimed at startups and scale-ups using AI, as well as teams preparing for audit or diligence. Assure is a better match for regulated industries and organisations managing multiple AI systems or issuing proofs to partners. Verify targets enterprises, regulated industries, high-stakes deployments and organisations under the EU AI Act. Whichever tier they consider, customers handling UK GDPR special category data should choose another service for that data.

Pros and cons

• Pros: Govern, Monitor and Prove bring registers, operational monitoring and evidence workflows together, suiting teams that want a connected governance programme.
• Pros: On-chain anchoring and independent verification can support organisations that need to demonstrate provenance or attestations to others.
• Pros: Explorer provides a free, ongoing entry point with public verification and CSV export, rather than a time-limited trial.
• Cons: Explorer is limited to one system, vendor, policy and assessment, so it is not a realistic capacity level for many active programmes.
• Cons: Core caps seats at five and systems at two; Assure costs more and still caps systems at six and users at ten.
• Cons: The DPA prohibits submitting UK GDPR special category data, which narrows the records suitable for the service.

Alternatives

AI Governance Software is the broader category to compare if Verisum's plan limits or data restriction do not fit.

• Prufer is worth considering for a free API/web option with a free trial; its free plan retains audit data for 7 days and has no uptime guarantee or SLA credits.
• Trusys AI may suit teams wanting API, web or self-hosted access and a free tier with unlimited functional and security evaluations for one application.
• Openlayer Guardrails is another free API, self-hosted and web option, with a Basic plan capped at one member and five projects.
• SAS/STAT is a paid alternative with pricing available by contacting SAS.
• AI Verify is a free, open-source toolkit under the permissive Apache 2.0 license.
• Riskonnect is a paid integrated risk management alternative for web, API, Android and iOS.
• AIGovernr offers a free plan and a Professional plan at $79 USD/month with unlimited website scans and priority support.
• Alterlayer is a paid web-based alternative.

Verdict

Choose Verisum if your organisation needs AI governance to span inventories, monitoring and verifiable evidence, and its plan limits match your scale. The free tier gives a small team a no-cost starting point, while Assure and Verify address more formal or cross-organisational needs. Look elsewhere if you need to submit UK GDPR special category data, or if the applicable system and user caps do not fit your programme.