Trail ML

Trail is a modular AI governance and GRC platform offered as two connected tracks: an AI Governance product for enterprises governing AI they build or deploy, and GRC Agents for compliance teams automating existing GRC workflows without replacing their current stack.

AI Registry
Maintains a centralized inventory of AI systems, models, agents, and third-party vendors, with automated risk and role classification under the EU AI Act, along with templates for assessing third-party AI vendors.

Curated Frameworks and Policy Management
Provides pre-built frameworks including the EU AI Act, ISO/IEC 42001, and NIST guidance, along with a custom framework builder and tools for creating and tracking AI-related policies and training.

Risk and Control Management
Includes a library of pre-built AI risk items drawn from sources such as MIT, NIST, OWASP, and BSI, along with a catalog of controls, automated control mapping, evidence tracking, and AI-assisted control assessments.

Documentation and Development Tracking
Generates compliance documentation from connected sources such as Confluence and code repositories, and logs AI development activity and experiments from within the IDE for traceability.

Audit Mode
Provides a dedicated workflow to support ISO/IEC 42001 and EU AI Act conformity audits.

ROPA Management and Dashboards
Supports Records of Processing Activities (ROPA) for GDPR compliance and offers configurable dashboards for tracking governance status.

GRC Agents
Purpose-built and custom-built agents handle tasks such as AI asset classification, control assessments, policy drafting, risk assessments, and evidence collection, connecting to tools including Confluence, ServiceNow, Jira, and GitHub. Agents operate continuously but write changes back to connected systems only after human sign-off, using a "Copy-on-Write" mechanism; both technical and non-technical users can configure custom agents with built-in human-in-the-loop oversight.

Deployment and Integrations
Trail can be deployed as a hosted SaaS product (EU data centers), on-premises, or in a customer's own cloud environment (AWS, Azure, or GCP). It integrates with GRC and enterprise asset management tools (including OneTrust, Collibra, ServiceNow, and SAP LeanIX), collaboration and development tools (Confluence, Jira, GitHub, GitLab, SharePoint, Notion), and MLOps platforms (Databricks, MLflow, Hugging Face, ZenML), with additional custom integrations available via a GraphQL API.