Compliant AI tools, by framework

AI tools whose vendor will sign a Business Associate Agreement (BAA), the baseline for handling protected health information (PHI) in the US. Usually available on an enterprise tier only.

AI tools that offer a Data Processing Agreement (DPA), the control EU and UK teams need before an AI vendor processes personal data on their behalf.

AI tools with a SOC 2 report: independent assurance over their security, availability and confidentiality controls. The baseline most B2B security reviews expect.

AI tools certified against ISO/IEC 27001, the international information-security management standard.

AI tools that do not train their models on your content by default. The single most important control for keeping confidential work out of a vendor's training set.