Sprinto

Active, privately held.

Sources 1, 2, 3 · checked 2026-11-08

• ISO 42001: coverage of ISO/IEC 42001 control objectives, out-of-the-box policy templates, AI risk evaluation routed to owners, evidence collection, and auditor collaboration
• AI discovery: detects AI tool usage across browser extensions, managed devices, integrations, and SSO sign-ins, and routes it to owners for approval
• Auto-maps existing ISO 42001 controls, policies, and evidence to other frameworks (ISO, HIPAA, GDPR, and 200+ others) with gap analysis
• Automated evidence collection and continuous control monitoring

Sources 1, 2, 3 · checked 2026-11-08

• Startups and mid-size companies adding ISO 42001 to an existing SOC 2 or ISO 27001 program

Sources 1, 2, 3 · checked 2026-11-08

Contact vendor (pricing page could not be retrieved; ask for a quote)

Sources 1, 2, 3 · checked 2026-11-08

• SOC 2 Type 2 (Trust Center lists compliant)
• ISO 27001 (Trust Center lists compliant)
• ISO/IEC 42001:2023 (Trust Center lists compliant)
• HIPAA (Trust Center lists compliant)

The Sprinto Trust Center could not be retrieved by automated fetch on 2026-11-08; certification labels come from a search-result snippet of that page. Request certificates through the Trust Center.

Listed as stated by the vendor. Scope can differ by product or subsidiary; request current reports.

Sources 1, 2, 3 · checked 2026-11-08

• No public pricing confirmed
• Sprinto's own pages give different ISO 42001 control counts; ask for the current control mapping
• Trust Center labels frameworks as compliant without naming certification bodies on the page; request certificates

Sources 1, 2, 3 · checked 2026-11-08