# Arthur AI - **Type:** Software product - **Website:** https://www.arthur.ai - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) US software that finds, monitors and enforces policy on a company's AI agents, with audit logs for compliance and security teams. It is a tool, not advice. ## Arthur AI scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 1/5 No published record found of Arthur defending any client through a regulatory investigation, breach or incident; disclosures flag clientOutcomes as false and no case study evidences this anywhere in the fact-set. ### Qualifications of the people who do the work: 1/5 Drawback states no SOC 2, ISO 27001 or ISO 42001 is disclosed anywhere on Arthur's site (homepage, docs, terms, privacy), and disclosures.accreditation and credentials are both false. ### What it publishes about fees: 3/5 Publishes Free ($0/mo) and Premium ($60/mo) pricing on its own pricing page (disclosures.fees true), but Enterprise tier is contact-sales only with no published rate card or worked example. ### Knowledge of your sector: 2/5 dp_ai_gov_practice_evidence says the practice evidence is product-only, not third-party audited, cites no named framework (NIST AI RMF, EU AI Act, ISO 42001), and the drawback confirms no named enterprise customers or case studies are published; Gartner/DoD mentions are unverified vendor-disclosed claims, not named practice evidence. ### Independence from what it sells: 1/5 No SOC 2/ISO certification is disclosed anywhere, so Arthur's own compliance/security posture is wholly self-declared with no independent audit evidence found in the fact-set. ### Who carries the risk if the advice is wrong: 2/5 disclosures.piInsurance is false and no PI insurance or liability terms are disclosed anywhere; only corporate-structure facts exist (Delaware Inc., SEC EDGAR CIK 0001832497, DC-governed terms). ## Sources for Arthur AI Every line carries the page it was read on and the date it was checked. - Arthur AI, Inc. is registered with SEC EDGAR under CIK 0001832497 as a Delaware corporation, with three Form D filings (2020, 2022, 2026) listing a Washington, DC business address - Source: https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001832497&type=D&dateb=&owner=include&count=40 - Checked: 2026-09-20 - Arthur's own privacy policy states the company is headquartered in Washington, DC, and that personal data is transferred to, stored and processed in the US and other international locations where it has affiliates and service providers - Source: https://www.arthur.ai/privacy - Checked: 2026-09-20 - Arthur's terms of service (legal entity name ArthurAI, Inc.) sets the District of Columbia as the governing jurisdiction for disputes, consistent with its SEC-registered DC address - Source: https://www.arthur.ai/terms - Checked: 2026-09-20 - Arthur publicly discloses pricing tiers of $0/mo (Free) and $60/mo (Premium) on its own pricing page, with Enterprise pricing only available by contacting sales - Source: https://www.arthur.ai/pricing - Checked: 2026-09-20 - Arthur's newsroom discloses a $42M Series B (2022) and $15M Series A (2021), and states Arthur was named a 2021 Gartner Cool Vendor in AI Governance and Responsible AI and was selected to provide AI performance capabilities for the US Department of Defense - Source: https://www.arthur.ai/newsroom - Checked: 2026-09-20 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Published - Indemnity cover: Not published - Credentials: Not published - Independent accreditation: Not published - Client results: Not published - How it uses AI: Published ## Strengths - Publicly discloses that its own platform uses AI ("Agent Behavioral Analytics") for real-time anomaly detection, rather than hiding this - Product is purpose-built for AI agent discovery, runtime security monitoring and policy enforcement across cloud/on-prem/endpoint agents, with audit-log and risk-assessment output aimed at compliance teams - Entry-level pricing ($0 and $60/mo tiers) is published openly rather than gated entirely behind "contact sales" - External validation exists in the form of a 2021 Gartner Cool Vendor recognition and a stated US Department of Defense engagement ## Things to check Each one carries the factual basis it rests on. - No SOC 2, ISO 27001 or ISO 42001 certification is disclosed anywhere on Arthur's public site (homepage, docs hub, terms or privacy policy), so the vendor's own security/compliance posture is unverified by any independent audit evidence found - Basis: Checked https://www.arthur.ai, https://docs.arthur.ai/, https://www.arthur.ai/terms and https://www.arthur.ai/privacy on 2026-09-20, none mention SOC 2, ISO 27001 or ISO 42001 - No named enterprise customers or case studies are published on the core product page, so claimed enterprise outcomes cannot be independently checked against a real customer account - Basis: https://www.arthur.ai/discover-and-govern-agents reviewed 2026-09-20, all workflow examples are generic/anonymised (e.g. "support-agent-v4"), no named customers or case studies present - The privacy policy itself flags that customer data may be processed in jurisdictions that lack data-protection standards equivalent to the customer's home jurisdiction, which is a material point for buyers evaluating this vendor for AI-governance/compliance use cases - Basis: https://www.arthur.ai/privacy, reviewed 2026-09-20: policy states data is processed in the US "as well as other international locations" and acknowledges "non-U.S. jurisdictions may lack equivalent data protection standards" ## Where this firm appears - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Which data protection, AI governance and cyber security providers publish a price?](https://theassurancedesk.com/lists/providers-that-publish-a-price) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.