Your auditor is going to ask
about AI. Be ready.
Collect evidence from your existing tools, score it against 116 AI governance controls, and get your organisation certification-ready — automatically, without spreadsheets.
The challenge
Can you answer these questions today?
These are not hypothetical. They are what auditors, regulators, and enterprise customers are asking right now.
Your finance team is pasting customer data into AI right now. Do you know where that data goes — or whether it is training the model?
Your AI provider says data stays in your region. Under the CLOUD Act, a US-headquartered provider can be compelled to hand it over regardless.
Your employees are signing up for AI tools on personal accounts. No SSO. No DPA. No visibility. You have no record it is happening.
Your enterprise customer is asking about AI governance. Right now, most teams answer with a PDF and hope nobody checks.
Your auditor will ask which AI tools your employees use and where that data goes. Can you answer that today — with evidence?
Your board wants a structured AI risk report. You have policies. You do not have evidence they are being followed.
How it works
Assess now. Certify when ready.
Get your governance score today. Certification-ready when the audit pipeline opens.
Assess today
Connect your tools and run your first assessment in hours. 116 controls across 18 governance domains. See exactly where you stand, what needs fixing, and how to fix it.
- 116 controls across 18 domains
- 100 tool connectors
- Step-by-step remediation guidance
- Audit-ready evidence pack
Get audited
When you are ready, request an independent audit through our founding auditor network. External auditors review your evidence pack directly in the Nitivai Auditor Portal. No back-and-forth email. No spreadsheets.
- Independent external auditors
- Direct evidence review
- Structured finding workflow
- Founding cohort: H2 2026
Get certified
Meet all five certification gates and receive the NIVAI certification. Your badge is publicly verifiable. Your evidence pack is on record.
- Five certification gates
- NIVAI certified badge
- Publicly verifiable certificate
Independent audit
Independent auditors. Rigorous process.
Your assessment begins today. Certification completes at launch. The audit pipeline is open now -- your evidence is being collected and structured for the moment your auditor is assigned.
Independent review
Auditors are external to Nitivai and independent from your organisation. They access your evidence pack directly -- no intermediary, no curated summaries, no selective disclosure.
Defined scope, no surprises
The audit is scoped to your framework and tied to specific controls. You see exactly what the auditor sees. Findings are raised against controls, not sent as unstructured email.
Verified practitioners
All auditors on the network are independently vetted by NIVAI before joining. Qualifications, independence, and relevant experience are confirmed before any engagement is assigned.
Start now
Start your assessment today
Connect your tools and run your first assessment now. Your evidence is structured and ready when the audit pipeline opens in H2 2026.
What's included
Everything you need for AI governance
Automated evidence collection
From your connected tools. No manual screenshots or spreadsheets.
Control-by-control assessment
Each of the 116 controls shows exactly what was found and why.
Remediation guidance
Specific steps to fix each gap, ordered by impact on your score.
Board-ready reports
PDF reports for your board, your auditor, or your enterprise customers.
NIVAI certified badge
Issued when you meet all five certification gates.
Auditor portal
Your external auditor gets read-only access to review all evidence directly.
ISO 42001 readiness reporting is now live
NIVAI-AGF evidence maps directly to all ISO 42001 clauses. Run your assessment once and get a complete ISO 42001 readiness report alongside your NIVAI score. When independent audits launch in H2 2026, your evidence is already audit-ready.
The platform
Built for security teams, not consultants
Nitivai™ is an operator tool, not a checklist. Every surface is designed to give you the exact information you need to improve your AI governance posture.
See your AI governance posture at a glance
A single dashboard shows your certification score, domain-by-domain breakdown, governance trends, and the controls that need attention. No spreadsheets, no guesswork.
Fix what matters, in the right order
Every failing control comes with step-by-step remediation guidance: who should fix it, how long it takes, and exactly what changes when they do. Assign owners, track progress, close gaps.
Evidence collected automatically, not manually
Connectors pull technical evidence from your tools. The document engine evaluates uploaded policies against 96 document types with 480+ criteria. The desktop agent observes AI tool usage across your organisation.
Know where your AI data goes
Map which AI tools run in which regions, flag tools operating outside your approved data processing regions, and track cross-border data flows. Region-level visibility your auditor will ask for.
Evaluate AI tools by what matters, not by tier labels
NIVAI-AGF evaluates every AI session against four observable governance properties: training opt-out, bounded retention, identity attribution, and administrative visibility. A tool is governed when all four are demonstrable, regardless of its commercial label.
Integrations
100 connectors. Evidence collected automatically.
Connect the tools your organisation already uses. Connectors collect technical evidence automatically. Policies, registers, and training records are maintained directly inside the platform.
NIVAI-AGF Standard
116 controls across 18 domains
A comprehensive AI governance standard purpose-built for organisations that develop or use AI. Evidence is collected automatically from your connected tools, uploaded policies, and structured registers you maintain inside Nitivai.
Framework readiness
One assessment. Seven frameworks.
Nitivai™ does not replace existing certification processes. It prepares you for them. ISO 42001 is fully supported. Other frameworks are available on demand.
NIVAI-AGF
The AI governance standard
Foundation
ISO 42001
AI management system
Live
SOC 2 Type II
AI controls subset
On demandISO 27001
AI security controls
On demand
NIST AI RMF
Risk management framework
On demand
EU AI Act
Regulatory compliance
On demand
SA AI Act
South African AI regulation
On demandFor auditors
Join the founding auditor network
We are establishing a founding cohort of independent practitioners to conduct the first AI governance certifications. Founding spots are limited. We welcome auditors from all disciplines -- information security, compliance, risk, data protection, and technology audit.
Founding auditors are independent practitioners, not employees of Nitivai. You conduct external audits through the Nitivai Auditor Portal and bring your own professional judgement to every engagement. Engagements start H2 2026 -- apply now to be considered.
You set your engagement fee. Organisations post their budget; you decide whether to accept.
Apply as a founding auditorDedicated auditor platform
The Nitivai Auditor Portal gives you direct access to evidence packs, structured control review, and a finding workflow. No shared login with the organisation being audited.
Structured evidence, not raw data
Evidence is pre-collected and organised by control. You review what the platform found, raise findings where evidence is missing or insufficient, and record your verdict per control.
Shape the process
Founding auditors provide feedback that shapes how AI governance audits work. Your input influences how the standard is applied in practice.
Request a demo
See Nitivai in action
We will walk you through a 30-minute demo of the platform, tailored to your frameworks of interest. No sales pitch. Just the product.
Live assessment walkthrough
See how evidence is collected from your tools and turned into control results.
ISO 42001 readiness report
We will show you a real ISO 42001 report generated from connected tools.
Auditor portal demo
See what your external auditor will see when reviewing your evidence pack.
AI governance you can prove.
Connect your tools, run your first assessment, and see exactly where you stand. Certification-ready from day one.
niti(Sanskrit) — moral order·vai (Portuguese) — it goes forward
Built on the NIVAI-AGF standard. Published at nivai.org.