RAIDS AI partnership targets ISO 42001 governance gap

RAIDS AI has partnered with compliance automation firm Drata and audit and certification provider Prescient Security to offer organisations a more complete approach to operational AI governance.

The arrangement brings together three elements of AI oversight, centred on the ISO 42001 standard. The companies will collaborate on market education and refer customers to one another.

ISO 42001 focus

The partnership begins with an educational webinar, ISO 42001 in practice, aimed at governance, risk and compliance teams and security professionals. The session outlined practical steps for implementing the standard in day-to-day operations, rather than treating it as an audit-time add-on.

ISO 42001 is the first international standard focused on AI management systems. It covers how organisations develop, deploy and manage AI systems, with an emphasis on responsible practices, transparency and risk management. Interest in the standard has grown as companies prepare for tighter scrutiny of AI use from regulators, customers and internal governance bodies.

Three-layer model

RAIDS AI, Drata and Prescient Security are positioning the collaboration as a three-layer model. Drata provides governance, risk, compliance and assurance tooling. RAIDS AI offers continuous monitoring of AI systems and generates evidence of how those systems behave in production. Prescient Security provides third-party validation and certification against standards.

The structure reflects a broader shift in compliance work. Many organisations now face questions about how AI models operate after deployment-from auditors, regulators, customers, procurement teams and boards. Static policies and periodic reviews can struggle to keep pace with systems that update frequently and are embedded in business processes.

Co-founded by Nik Kairinos and Brett Stonefield, RAIDS AI sells an AI safety monitoring platform that detects and alerts on what it describes as rogue AI behaviour in real time. The platform flags deviations that could lead to failures, bias or regulatory exposure.

Drata markets an agentic trust management platform that automates parts of governance and compliance work. It focuses on continuously interpreting controls and risk signals and maintaining audit readiness across multiple frameworks.

Prescient Security provides services including compliance penetration testing, audits, attestation and certification across a range of standards and frameworks. The company says it works across more than 25 frameworks.

Governance pressure

Companies adopting AI at scale are under increasing pressure to show not only that policies exist, but that controls operate effectively. Governance programmes must cover model development and procurement, as well as operational monitoring, incident response, documentation and evidence collection.

In many sectors, AI governance is also being tied to broader cyber and data security practices. Organisations are being asked to show how AI systems handle sensitive data, manage third-party models and test for unintended outcomes. Demonstrating control operation through logs and monitoring has become central to this work.

The partnership is designed around these demands, linking an assurance framework, continuous monitoring and certification.

"Regulation continues to become more complex and is evolving quickly in order to keep up with technology that is increasingly sophisticated," said Nik Kairinos, Chief Executive Officer and co-founder of RAIDS AI.

"This is why compliance has moved far beyond fulfilling a prescribed set of criteria. In order to adapt successfully, it's critical that organizations comprehensively integrate the three layers: the compliance framework, continuous monitoring and evidence, and the certification to go with it.

"The offering of RAIDS, Drata and Prescient Security fit together to provide end-to-end AI governance, and there is a shared commitment and enthusiasm to educate the market and help those responsible for compliance ensure they are ahead of the curve."

Prescient Security framed the partnership around continuous oversight. "What excites me most about partnering with RAIDS AI is that they're solving the problem everyone talks about but very few actually operationalize: continuous AI oversight in the real world," said Sammy Chowdhury, Chief Executive Officer of Prescient Security.

"We're at an inflection point where AI adoption is outpacing governance, regulation, and risk management. With regulators, boards, and customers demanding transparency, explainability, and accountability, organizations can no longer rely on static policies or annual audits. In my opinion, managing AI risks is no different than managing user behavior risks. Tools like RAIDs promises to increase transparency in AI behaviors," Chowdhury said.

The companies said they will continue joint education efforts around ISO 42001 and related governance practices as organisations expand AI use and prepare for tighter oversight.