We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk
Holistic AI logo

Holistic AI review

Software product

A UK software platform that companies license to find, test and monitor AI systems against the EU AI Act, NIST AI RMF and ISO 42001.

Relevant if you want one tool to list your AI systems and map them to several frameworks

Price Not published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

Holistic AI scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 4/5
Qualifications of the people who do the work 2/5
What it publishes about fees 1/5
Knowledge of your sector 1/5
Independence from what it sells 1/5
Who carries the risk if the advice is wrong 1/5

What Holistic AI offers, and what it publishes

Holistic AI is software you license, not a consultant. It lists a company's AI systems, tests them for bias, safety and security risks, and maps them to the EU AI Act, NIST AI RMF, ISO 42001 and New York City's Local Law 144. The firm says it keeps 'continuous audit trails' automatically.

Holistic AI does not publish a price; every route leads to a demo. The only certification claim we found is one privacy policy line saying its databases 'comply with ISO 27001', with no certificate or certifying body named. We found no SOC 2 or ISO 42001 claim.

Its terms name 'Holistic AI Inc', not the UK company Holistic AI Limited, and set no liability cap or uptime promise. It publishes a case study describing 200+ AI audits for Unilever. We found no UK government G-Cloud listing.

Strengths

  • Homepage explicitly claims 'continuous audit trails, evidence collection, and compliance reporting' generated automatically for regulatory review
  • Built-in framework mapping for EU AI Act, NIST AI RMF, ISO 42001 and NYC Local Law 144 with automated control mapping and gap analysis
  • Founded and led by named co-CEOs with published AI ethics/ML research backgrounds (Emre Kazim, Adriano Koshiyama)
  • Documented large-enterprise deployment (Unilever, 200+ audits) evidencing scale of real-world use

Things to check

  • No public pricing page is published, so buyers cannot see cost bands without booking a sales demo, making early-stage cost comparison against other vendors difficult.
  • The only security certification claim found (ISO 27001) is a single sentence in the privacy policy about database infrastructure, with no certificate, audit date or certifying body named, so it cannot be independently verified.
  • The public Terms & Conditions page refers to the operating entity as 'Holistic AI Inc' despite the company being UK-registered as Holistic AI Limited, and contains no liability caps, indemnification terms or SLA/uptime commitments.

Common questions

Does Holistic AI publish its prices?

No. Prices come only after booking a demo; it has no pricing page.

Is Holistic AI certified to ISO 27001 or SOC 2?

Not that it shows. One privacy policy line says its databases 'comply with ISO 27001', with no certificate, audit date or certifying body. We found no SOC 2 or ISO 42001 claim.

Is Holistic AI a UK company?

Yes. Holistic AI Limited is a UK company based in London, though its terms name 'Holistic AI Inc'.

Evidence for each Holistic AI score

Show our working

Notes behind each thing to check

  • No public pricing page is published, so buyers cannot see cost bands without booking a sales demo, making early-stage cost comparison against other vendors difficult. (holisticai.com/pricing returns a 404 error and third-party listings (TrustRadius, SoftwareFinder) confirm pricing is quote-only via demo request, https://www.holisticai.com/demo)
  • The only security certification claim found (ISO 27001) is a single sentence in the privacy policy about database infrastructure, with no certificate, audit date or certifying body named, so it cannot be independently verified. (https://www.holisticai.com/privacy-policy states only that 'databases are cloud-based and comply with ISO 27001'; no SOC 2, ISO 42001 or named auditor was found elsewhere on the site)
  • The public Terms & Conditions page refers to the operating entity as 'Holistic AI Inc' despite the company being UK-registered as Holistic AI Limited, and contains no liability caps, indemnification terms or SLA/uptime commitments. (https://www.holisticai.com/terms-conditions)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 4/5 Homepage states the platform provides 'continuous audit trails, evidence collection, and compliance reporting, audit-ready from day one,' with control mapping to EU AI Act, NIST AI RMF and ISO 42001, though not independently audited.
Qualifications of the people who do the work 2/5 Only a single unverified sentence claims ISO 27001 compliance for databases; no SOC 2, ISO 42001 or named CISO/security lead was found, though co-founders' technical backgrounds are named.
What it publishes about fees 1/5 No pricing page exists (404) and no figures are published anywhere found; access is gated entirely behind a demo booking form.
Knowledge of your sector 1/5 Platform pages describe a generic, framework-based approach with no named sector-specific modules for financial services, healthcare or similar industries.
Independence from what it sells 1/5 The ISO 27001 claim is a single self-declared sentence in the privacy policy with no certificate reference, audit date or certifying body named for independent verification.
Who carries the risk if the advice is wrong 1/5 The public Terms and Conditions page contains no liability cap, indemnification clause or SLA/uptime commitment; it reads as generic boilerplate referencing 'Holistic AI Inc'.

Sources for Holistic AI

  • UK company registration (Holistic AI Limited, company number 12962678, incorporated 20 October 2020, status Active, registered office 20 Bedford Square, London WC1B 3HH) (Companies House, checked 17 July 2026)
  • Product scope (SaaS AI governance platform covering AI system discovery/inventory, automated bias/safety/security risk testing, and compliance mapping to the EU AI Act, NIST AI RMF, ISO 42001 and NYC Local Law 144) (holisticai.com, checked 17 July 2026)
  • Pricing disclosure (No public pricing page exists (holisticai.com/pricing returns a 404); pricing is gated entirely behind a 'Schedule a demo' request with no published figures or tiers) (holisticai.com, checked 17 July 2026)
  • UK presence (Headquartered in London, UK per Companies House registered office; no UK Government G-Cloud/Digital Marketplace listing was found for Holistic AI) (Companies House, checked 17 July 2026)
  • Named customer case study (Published case study describing 200+ AI audits performed for Unilever's global AI inventory and risk management programme) (holisticai.com, checked 17 July 2026)

ISO 27001 (self-stated on Privacy Policy, for database infrastructure)

Exposed to the EU AI ActSeeking ISO 42001 certificationSwitching provider

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.