By Industry
Healthcare Legal Financial Services Pharmaceutical
By Use Case
Output Verification MCP Governance Compliance Automation Agent Governance
Platform
Console API & SDK Integrations Agent Identity Status
Resources
Documentation Blog Research Case Studies Changelog Privacy Policy
Account
Contact
Sales Support Partnerships Login

SOC2. ISO 42001. EU AI Act. HIPAA.
Four frameworks. 28 controls. Automated daily.

Not a quarterly audit. Not a spreadsheet. Daily automated scans across your infrastructure, verification pipeline, and agent fleet. Drift detection within 24 hours. Evidence collection that runs itself.

Get Started

Traditional compliance tools
do not cover AI

Vanta and Drata do not cover AI
Traditional compliance platforms automate SOC2 for software companies. They do not understand AI-specific requirements: output verification, confabulation detection, agent governance, model risk management.
The AI governance gap
August 2026
The EU AI Act compliance deadline for high-risk AI systems. Continuous monitoring, transparency, and human oversight are not optional. The deadline is 5 months away.
EU AI Act enforcement date
Weeks of manual work
Compliance teams spend weeks pulling logs, interviewing developers, and reconstructing verification chains. Meerkat collects evidence continuously and automatically. Export-ready for your auditor.
The evidence problem

Daily automated scans.
Not quarterly audits.

Automated Daily Scans
Every day at 05:00 PT, Meerkat scans your infrastructure and verification pipeline
  • Azure infrastructure: IAM policies, encryption settings, availability
  • Verification pipeline: audit trails, agent governance, output verification
  • Maps findings to SOC2, ISO 42001, EU AI Act, and HIPAA controls
Drift Detection
If a control regresses, you know within 24 hours, not next quarter
  • If encryption gets disabled, access controls change, or the pipeline goes down
  • Severity-based alerting: critical regressions escalate immediately
  • Gap analysis with actionable fixes: what to fix, how long it takes, how critical it is
Framework Controls Automated Score
SOC2 Type II118 automated, 3 policy docs100%
ISO 4200155 automated100%
EU AI Act65 automated, 1 documentation100%
HIPAA66 automated100%

Meerkat Labs' own compliance scores. Customer environments will vary.

Four frameworks. Built in, not bolted on.

SOC2 Type II

Trust Service Criteria: control environment, logical access, system operations, change management, risk mitigation, availability, confidentiality. Automated checks for encryption, IAM, monitoring, deployment practices.

ISO 42001

AI Management Systems: AI policy, risk assessment, output verification, continuous monitoring, improvement processes. Meerkat's verification pipeline IS the ISO 42001 evidence.

EU AI Act

Risk management, technical documentation, transparency, human oversight, accuracy verification, quality management. Aligned to the August 2026 high-risk compliance deadline.

HIPAA

Access control, encryption, audit controls, integrity, authentication, transmission security. Data sovereignty by design. BAA available on Enterprise.

Evidence Collection

Every scan produces exportable evidence: infrastructure configs, IAM policies, encryption settings, verification logs, agent heartbeat records. The evidence package your auditor needs.

Gap Analysis

When a control fails, Meerkat tells you what the risk is, what specifically to fix, how long it will take, and how critical it is. Not just "failed." Actionable.

Your compliance data never
leaves your environment

Cloud API

Governance dashboard and audit trail via API. Active in 5 minutes.

Hybrid Sidecar

Compliance infrastructure inside your network. Audit data stays internal.

Self-Hosted

Full governance stack behind your firewall. For regulated environments.

Start continuous AI governance today

Free tier. 10,000 verifications/month. No credit card.