Enterprise
Your region. Our infrastructure.
Regional data residency, compliance-ready for SOC 2 Type II, GDPR and HIPAA, and a direct line to our team. The same signed record and Trust Ratings every customer gets.
Capabilities
Everything you need for production AI governance.
- EU AI Act mappingArticle 10 (data governance), Article 12 (record-keeping), and Annex IV (technical documentation) mapped to the signed governance event chain; the audit chain is the answer, not a quarterly PDF.
- Signed audit trailIntegrity checkpoints are Ed25519-signed, hash-chained and exportable per agent. Changes to agent cards and protection settings go to a governance audit log, and API write requests are logged.
- RolesFive roles: owner, admin, member, viewer and auditor. Members manage only their own agents; auditors get read-only access to billing, costs and the audit log.
- SupportA published 99.9% availability target for our core services, tracked on status.mnemom.ai. Enterprise contracts can include negotiated uptime and support terms.
- Mnemom AEGIS Managed RulesDetection rules we publish to every gateway as an Ed25519-signed rule set, which each gateway verifies before use. Gateways pick up changes within minutes.
- Regional cellsRegional data residency supported. Mnemom-operated, multi-tenant infrastructure, not a dedicated or single-tenant instance.
- Compliance-ready for SOC 2 Type II, GDPR and HIPAAThird-party audit in progress. Security questionnaires and control evidence are available under NDA.
Scenarios
What this looks like in production.
Real scenarios, powered by real infrastructure.
- The Lending DecisionAn AI agent applies for an uncollateralized loan. Instead of guessing, the lender checks the agent's Trust Rating before approving, and the evidence behind it can be checked.
- The Compliance AuditAn auditor asks for evidence. Export the agent's signed integrity checkpoints and verify any certificate against our published key.
- The Fleet IncidentAn agent starts crossing its boundaries. With automatic pausing turned on, the gateway stops it after a set number of violations, and the dashboard shows the signed checkpoints behind it.
EU AI Act mapping
Articles 10, 12, and Annex IV — answered by the audit chain.
Every integrity checkpoint is signed and hash-chained. The evidence the regulator asks for is the evidence we already produce.
| Article | Requirement | How Mnemom answers |
|---|---|---|
| Article 10 | Data governance | Data boundaries are org-defined on the Protection Card's protected surface (assets, forbidden ops, escalation-required); Alignment Cards declare the agent's intent and autonomy bounds; AIP back-door screening verifies every output against PII/PHI patterns; CLPI Phase 2 governs the card lifecycle and amendments. |
| Article 12 | Record-keeping | Every integrity checkpoint is Ed25519-signed and hash-chained, and Managed Rule sets are signed and verified by each gateway before use. Trust Ratings are anchored on Base L2 for independent verification. |
| Annex IV | Technical documentation | For each agent you can export its integrity checkpoints with signatures and chain links, score history, card amendments and reclassifications. An auditor can check any checkpoint certificate against our published key. |
Enforcement date: 2026-08-02. Compliance posture is a joint responsibility; see /trust.
Framework coverage
Mapped to the frameworks your security team already uses.
Beyond the EU AI Act, our controls are mapped to NIST's AI Risk Management Framework and the OWASP Agentic Security Initiative Top 10. Each mapping names a shipped control — it's a technical mapping, not a certification.
| Framework | Status | How Mnemom maps |
|---|---|---|
| NIST AI RMF 1.0 | Mapped (not certified) | All four functions — GOVERN, MAP, MEASURE, MANAGE — mapped to shipped controls (Alignment Cards, AIP integrity checkpoints, Trust Ratings). NIST AI 100-1 is a voluntary framework with no certification body; this is a technical mapping. |
| OWASP Agentic Top 10 | Mapped (ASI01–10) | All ten ASI categories — from Agent Goal Hijack (ASI01) to Rogue Agents (ASI10) — mapped to Safe House and AEGIS controls, with current gaps stated honestly rather than papered over. |
| ISO 42001 / 27001 | Not certified | Not certified and not in audit. |
Full mappings: NIST AI RMF in /guides/eu-compliance, OWASP Agentic Top 10 in /guides/owasp-agentic-top-10, and our compliance status on /trust.
What you get
What's included.
- Signed integrity checkpoints
- Trust Ratings for your agent fleet
- Open-source OpenTelemetry exporter
- Pause, resume and stop controls for every agent
- Coherence analysis across your fleet
Next step
Ready to deploy verifiable AI?
Our team will help you evaluate Mnemom for your use case, compliance requirements, and deployment environment.
