The Assurance Desk
What Enzai offers, and what it publishes
You get a platform your team runs, not consultants. It keeps a register of your AI systems, tracks 500+ third-party AI solutions, runs intake workflows and maps each system to the EU AI Act, NIST RMF and ISO standards. The UK government's Centre for Data Ethics and Innovation lists two Enzai products in its portfolio of AI assurance techniques.
Enzai does not publish a price, a tier or a pricing model; all pricing questions go to a demo booking form. Its public terms exclude liability for a broad list of losses 'even if foreseeable' and do not promise the site will always be available. The contract you sign may differ.
Enzai says it has held ISO/IEC 27001 since 2023, audited each year by the certification body NQA. It is a small Belfast company, set up in 2021, and says its platform has logged over 1.5 million decisions, risks and controls. It publishes no sector-specific modules and names no security lead.
Strengths
- Independently certified to ISO/IEC 27001 since 2023 with annual third-party audits by named certification body NQA, rather than a purely self-declared claim
- Two of its tools feature in the UK government's Portfolio of AI Assurance Techniques.
- UK-headquartered (Belfast) and Companies House registered, giving straightforward UK jurisdiction for contracting
- Platform is stated to have logged over 1.5 million decisions, risks and controls, indicating an established production customer base for a smaller vendor
Things to check
- No pricing information of any kind, not even indicative tiers or a per-seat model, is published; buyers must book a demo before learning even a pricing structure.
- Its publicly available Terms and Conditions explicitly disclaim liability for almost all loss and make no uptime or availability guarantee, a weak public liability/SLA position for an enterprise compliance tool.
Common questions
Does Enzai publish its prices?
No. There is no pricing page, tier or model. Pricing comes up only after you book a demo.
Is Enzai advice or software?
Software. Your team licenses the platform and runs it to record, assess and monitor AI systems. Enzai does not act as your consultant.
Evidence for each Enzai score
Show our working
Notes behind each thing to check
- No pricing information of any kind, not even indicative tiers or a per-seat model, is published; buyers must book a demo before learning even a pricing structure. (https://www.enz.ai/contact/book-a-demo directs all pricing enquiries to a demo booking form with no published figures or tiers)
- Its publicly available Terms and Conditions explicitly disclaim liability for almost all loss and make no uptime or availability guarantee, a weak public liability/SLA position for an enterprise compliance tool. (https://www.enz.ai/en/policies/terms-and-conditions states Enzai 'will not be liable...even if foreseeable' for a broad list of losses and 'do not guarantee that our site...will always be available or be uninterrupted')
| Criterion | Score | Evidence |
|---|---|---|
| Help when things go wrong | The platform is described as creating 'a centralized system of record where AI systems, models, datasets, and governance decisions are documented, assessed, and auditable,' explicitly aimed at audit readiness. | |
| Qualifications of the people who do the work | The vendor discloses a specific, named-auditor ISO/IEC 27001 certification (NQA, since 2023) on its own site, though no CISO or named technical security lead is published. | |
| What it publishes about fees | No pricing figures, tiers or model are published anywhere on the site; all pricing is behind a demo request form. | |
| Knowledge of your sector | The platform is marketed as horizontal and framework-based (EU AI Act, GDPR, NIST, ISO) with no named sector-specific modules found. | |
| Independence from what it sells | The ISO 27001 certification names an actual accredited certification body (NQA) conducting annual audits, giving genuine independent verification, though no second certification (e.g. SOC 2) was found. | |
| Who carries the risk if the advice is wrong | Public Terms and Conditions disclose a liability position, but it is a broad disclaimer excluding almost all liability and explicitly declining any uptime guarantee, not a published cap or SLA commitment. |
Sources for Enzai
- UK company registration (Enzai Technologies Limited, Companies House number NI681546, incorporated 13 August 2021 in Northern Ireland, status Active, registered office Create Lab, 2nd Floor, 17-21 Bruce Street, Belfast BT2 7JD) (Companies House, checked 17 July 2026)
- Product scope (AI governance SaaS platform providing an AI registry/inventory (tracking 500+ third-party AI solutions), use-case intake workflows, continuous monitoring, and compliance mapping to the EU AI Act, GDPR, NIST RMF and ISO standards) (enz.ai, checked 17 July 2026)
- Pricing disclosure (No public pricing page exists; the site directs prospective buyers to 'book a demo' or contact the team about 'plans, pricing' with no figures published anywhere) (enz.ai, checked 17 July 2026)
- UK government recognition (Enzai is featured by the UK government's Centre for Data Ethics and Innovation (CDEI) in its published portfolio of AI assurance techniques, with dedicated GOV.UK listings for its AI Model Inventory and AI Governance Hub products) (gov.uk, checked 17 July 2026)
- Security certification (States it has been ISO/IEC 27001 certified since 2023, with annual audits performed by certification body NQA) (enz.ai, checked 17 July 2026)
ISO/IEC 27001 (certified since 2023, audited annually by NQA)
Exposed to the EU AI ActSeeking ISO 42001 certificationSwitching provider
Where this firm appears
- Can the firm that prepares you also certify you?
- Does the EU AI Act apply to a UK firm?
- How do you change your data protection provider?
- Compare providers
If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
This is an independent editorial guide, not legal advice.