We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk
IBM watsonx.governance logo

IBM watsonx.governance review

Software product

An IBM software product, part of its watsonx AI platform, that organisations license to monitor, document and set rules for their AI models. It is not advice.

Relevant if you use IBM's watsonx and want audit records for AI models, with a published starting price

Price Published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

IBM watsonx.governance scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 5/5
Qualifications of the people who do the work 3/5
What it publishes about fees 4/5
Knowledge of your sector 4/5
Independence from what it sells 3/5
Who carries the risk if the advice is wrong 2/5

What IBM watsonx.governance offers, and what it publishes

Each AI model gets an AI Factsheet, a record of its purpose, risk class, data sources, test results and approvals. Built-in content covers 12 regulatory frameworks, including the EU AI Act, ISO 42001 and SR 11-7 for US bank model risk.

IBM publishes starting prices. Risk & Compliance Basic on IBM Cloud starts at US$3,500 a month, before applicable taxes and duties. That covers one basic instance, one module and one concurrent user. Prices vary by country. IBM's documentation says the product 'is not currently SOC 2 certified', though IBM says the IBM Cloud data centres behind Watson hold SOC 2. We could not check its liability or uptime terms.

UK public bodies can buy it on G-Cloud through reseller Computacenter, but that listing says the model risk, regulatory compliance and operational risk modules are not yet included. We found no UK customer story for this product; IBM's NatWest case study covers watsonx Assistant.

Strengths

  • Publishes starting prices, including a monthly price for its Risk & Compliance Basic plan.
  • AI Factsheets automatically document and version a model's full lifecycle (purpose, risk classification, data provenance, validation results, approval chain) with a stated audit trail of changes
  • Compliance Accelerators cover 12 named regulatory frameworks including sector-specific ones such as SR 11-7 for US banking model risk, showing genuine sector/regulatory depth
  • Backed by IBM's large, long-established infrastructure, including IBM Cloud data centres independently certified to ISO 27001 and SOC 2

Things to check

  • IBM's own documentation states that watsonx.governance itself 'is not currently SOC 2 certified,' even though the underlying IBM Cloud infrastructure carries SOC 2 certification, a distinction buyers should not conflate.
  • The UK Government Digital Marketplace listing for watsonx.governance explicitly excludes some of the product's core modules (model risk governance, regulatory compliance and operational risk management) from the G-Cloud-purchasable scope.
  • No watsonx.governance-specific UK named case study was found; the one prominent UK bank case study identified (NatWest) is for a different product, watsonx Assistant, not watsonx.governance.

Common questions

Does IBM publish a price for watsonx.governance?

Yes. Risk & Compliance Basic on IBM Cloud starts at US$3,500 a month for one basic instance, one module and one concurrent user. Prices are indicative, vary by country and exclude applicable taxes and duties.

Is watsonx.governance SOC 2 certified?

No. IBM's documentation says the product 'is not currently SOC 2 certified'. IBM says the IBM Cloud data centres behind Watson services hold SOC 2 separately.

Can UK public bodies buy it through G-Cloud?

Yes, through reseller Computacenter. The listing says the model risk governance, regulatory compliance and operational risk management modules are not yet included.

Evidence for each IBM watsonx.governance score

Show our working

Notes behind each thing to check

  • IBM's own documentation states that watsonx.governance itself 'is not currently SOC 2 certified,' even though the underlying IBM Cloud infrastructure carries SOC 2 certification, a distinction buyers should not conflate. (IBM documentation notes watsonx.governance is not currently SOC 2 certified as a product, distinct from the SOC 2-certified IBM Cloud data centres described at https://www.ibm.com/products/cloud/compliance/soc-2)
  • The UK Government Digital Marketplace listing for watsonx.governance explicitly excludes some of the product's core modules (model risk governance, regulatory compliance and operational risk management) from the G-Cloud-purchasable scope. (https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/420266498220359 states these modules are not yet part of the G-Cloud offering)
  • No watsonx.governance-specific UK named case study was found; the one prominent UK bank case study identified (NatWest) is for a different product, watsonx Assistant, not watsonx.governance. (https://www.ibm.com/case-studies/natwest-group-watson describes watsonx Assistant use for mortgage call-centre support, not the governance product)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 5/5 AI Factsheets automatically capture and version a model's full lifecycle, purpose, risk classification, data provenance, validation results, approval chain, explicitly creating 'a full audit trail' documented as regulator-facing evidence.
Qualifications of the people who do the work 3/5 IBM discloses ISO 27001 and SOC 2 certification for IBM Cloud data centres and ISO 27018 for Watson AI services, but its own documentation states the watsonx.governance product itself is not currently SOC 2 certified.
What it publishes about fees 4/5 The IBM pricing page publishes starting prices, including US$3,500 monthly for Risk & Compliance Basic on IBM Cloud. It states that prices vary by country and exclude applicable taxes and duties. Checked 2026-10-13.
Knowledge of your sector 4/5 Compliance Accelerators name sector-specific frameworks such as SR 11-7 for US banking model risk alongside EU AI Act, NIST and ISO 42001, evidencing genuine sector-aware regulatory content.
Independence from what it sells 3/5 ISO 27001/SOC 2 certification of underlying IBM Cloud infrastructure is independently audited, but IBM's own documentation states watsonx.governance itself is not currently SOC 2 certified, weakening the product-level independence claim.
Who carries the risk if the advice is wrong 2/5 IBM is known to publish standard Cloud Services Agreement and SLA documents as part of its enterprise contracting practice, but this research could not directly access and verify specific liability-cap or uptime wording for watsonx.governance.

Sources for IBM watsonx.governance

  • Company registration (IBM Corporation is incorporated in New York State, USA; its UK subsidiary IBM United Kingdom Limited (Companies House number 00741598) is Active, incorporated 21 November 1962) (Companies House, checked 17 July 2026)
  • Product scope (Provides AI model/agent risk governance, monitoring for accuracy/fairness/drift, automatically generated 'AI Factsheets' documenting an asset's lifecycle (purpose, risk classification, data provenance, validation results, approval chain), and Compliance Accelerators pre-loaded for 12 regulatory frameworks including the EU AI Act, SR 11-7, NYC Local Law 144, ISO 42001 and NIST AI RMF) (ibm.com, checked 17 July 2026)
  • Pricing disclosure (Risk & Compliance Basic on IBM Cloud starts at US$3,500 per month for one basic instance, one module and one concurrent user. Prices are indicative, vary by country and exclude applicable taxes and duties.) (ibm.com, checked 13 October 2026)
  • UK presence (Listed on the UK Government Digital Marketplace (G-Cloud) as 'Computacenter - IBM WatsonX.Governance'; the listing notes the model risk governance, regulatory compliance and operational risk management modules are not yet part of the G-Cloud-listed offering) (G-Cloud, checked 17 July 2026)
  • Security certifications (IBM states the IBM Cloud data centres supporting Watson services are ISO 27001 and SOC 2 certified, and that Watson AI services have received ISO 27018 certification; separately, IBM documentation states watsonx.governance itself 'is not currently SOC 2 certified' as a product) (ibm.com, checked 17 July 2026)
  • Customer evidence (IBM publishes a general 'watsonx client stories and quotes' page; no watsonx.governance-specific UK case study was found, a NatWest case study exists but covers watsonx Assistant, not watsonx.governance) (ibm.com, checked 17 July 2026)

ISO/IEC 27001 (IBM Cloud data centres supporting Watson) ISO/IEC 27018 (Watson AI services)

Exposed to the EU AI ActSeeking ISO 42001 certificationRegulated sectorsSwitching provider

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.