# Saidot

- **Type:** Software product
- **Website:** https://www.saidot.ai
- **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd)

Finnish subscription software for keeping an inventory of your AI systems, classifying their risk and producing EU AI Act documents. You run it yourself; it is not advice.

## Saidot scores

Scored 1 to 5 on six criteria. There is no overall score.

### Help when things go wrong: 5/5

Saidot's product page documents that classifications/controls/approvals are 'documented and traceable', evidence can be 'collected once and reused', AI systems can be sent for 'external conformity assessment' directly in the platform, and transparency reports can be generated straight from the system record.

### Qualifications of the people who do the work: 3/5

Saidot names its CEO (Meeri Haataja, verifiable via LinkedIn and third-party press) and holds an independently certified ISO/IEC 27001:2022 management system, but holds no SOC 2 or ISO 42001 certification of its own, and its about page does not name additional leadership individually.

### What it publishes about fees: 1/5

saidot.ai/pricing shows no dollar figures anywhere, only 'Get started' and 'Book intro' demo calls to action.

### Knowledge of your sector: 2/5

Saidot's platform and marketing describe a general-purpose AI governance/knowledge-graph approach applicable across industries, with no named industry-vertical modules found on saidot.ai.

### Independence from what it sells: 3/5

Saidot's ISO/IEC 27001:2022 certification is independently audited (certified by Prescient Security), but its core product claims (e.g. the size of its risk/control knowledge graph) are self-declared with no independent audit evidence found.

### Who carries the risk if the advice is wrong: 4/5

Saidot's Terms of Service publish a specific liability cap, fees paid in the preceding six months, and exclude indirect/consequential damages, though no numeric uptime/SLA commitment was found in the published terms.

## Sources for Saidot

Every line carries the page it was read on and the date it was checked.

- Corporate entity/jurisdiction
  - Source: https://www.saidot.ai/terms
  - Checked: 2026-07-17
- Product scope
  - Source: https://www.saidot.ai/product
  - Checked: 2026-07-17
- Pricing disclosure
  - Source: https://www.saidot.ai/pricing
  - Checked: 2026-07-17
- UK presence
  - Source: https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/search?q=saidot
  - Checked: 2026-07-17
- Own certification
  - Source: https://www.saidot.ai/about-us
  - Checked: 2026-07-17

## What this provider publishes

Not published means we did not find it on the firm's own pages.

- Price: Not published
- Indemnity cover: Published
- Credentials: Published
- Independent accreditation: Published
- Client results: Not published
- How it uses AI: Published

## Strengths

- Product is purpose-built around EU AI Act conformity workflows, risk classification, conformity-assessment routing and transparency-report generation, rather than AI governance being a bolt-on to a broader GRC suite
- Holds an independently certified ISO/IEC 27001:2022 information security management system (certified by Prescient Security)
- Led by a CEO (Meeri Haataja) with a documented public-policy background, she chaired the ethics working group of Finland's national AI programme and previously worked on GDPR implementation at OP Financial Group
- Publishes real contractual liability and indemnification terms in its Terms of Service, unlike some smaller AI-governance vendors

## Things to check

Each one carries the factual basis it rests on.

- No UK presence, UK customers, or UK Digital Marketplace/G-Cloud listing was found, a direct search returned zero results, making Saidot a less established option for UK public-sector buyers than vendors with a UK entity or G-Cloud listing.
  - Basis: A direct search of applytosupply.digitalmarketplace.service.gov.uk for 'saidot' returns '0 results found containing saidot in All lots'.
- Saidot does not appear to hold SOC 2 or ISO/IEC 42001 certification itself, only ISO/IEC 27001:2022 was confirmed, despite ISO 42001 (the AI management system standard) being directly relevant to an AI-governance vendor's own credibility.
  - Basis: saidot.ai/about-us and the Saidot homepage confirm only ISO/IEC 27001:2022 as a certification Saidot itself holds; no SOC 2 or ISO 42001 certification for Saidot's own organisation was found on the site.

## Where this firm appears

- [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking)
- [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed)
- [Compare providers](https://theassurancedesk.com/compare)

---

**Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in.

**Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here.

**Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
