Asenion

Asenion is an operational AI governance platform formed in 2025 when Fairly AI acquired anch.AI. It converts regulations, standards and internal policies into context-aware controls, then assesses, verifies and monitors AI models, copilots and agents against them, producing audit-oriented evidence.

What It Is

Asenion's AI Control System is aimed at GRC, risk and security teams that need to show their AI systems operate within required rules. Its ControlGen engine contextualizes reusable control objectives and controls from Asenion Policy Packs for a given use case, jurisdiction, risk profile and organizational intent. The same controls then drive three capabilities: Assess (lifecycle assessments), Verify (pre-deployment testing) and Witness (runtime governance).

A second offering, AI Compliance-in-a-Box, is described as a way for teams just starting out to stand up an AI compliance program with ready-made policies, controls and expert guidance.

From Requirement to Evidence

The site describes a chain of requirement, context, intent, control objective, control, verification and evidence. Examples given include hiring AI (requiring documented human approval before rejecting a candidate), a children's learning tutor (consent and content filtering) and a bank support chatbot (step-up authentication and prompt-injection defenses).

• Verify runs tests for prompt injection, data leakage, bias, hallucination and unsafe actions, with each result mapped to a control requirement.
• Witness applies controls to agent actions in production and can allow, flag or block them.
• A tamper-resistant evidence ledger records which controls applied and whether they worked.

Coverage and Standards

Policy Packs cover frameworks such as the EU AI Act, ISO/IEC 42001, NIST AI RMF, OSFI E-23 and U.S. state laws, with industry pages for banking, insurance, health care, public sector, legal and others. Asenion states it is certified to ISO/IEC 42001 and ISO/IEC 27001 for the AI Control System, and says it connects to GRC, ITSM, cloud ML and agent platforms. The company also positions itself as a content partner for GRC platform vendors.