What Attestly is
Attestly helps compliance, risk and operations teams narrow a shortlist of AI tools by what matters to a regulated firm: security attestations, whether customer data is used for training, where data is hosted, retention controls and archiving. It covers six categories: meeting notes, AI governance, research and analysis, fraud and AML, communications archiving and KYC and onboarding. It also publishes tool reviews and guides on recordkeeping and vendor due diligence.
Attestly is an independent publication. It is not owned by, or affiliated with, any listed vendor, or with the FCA, ESMA, FINRA or the SEC.
Where our facts come from
We use two kinds of source, and we say which one a statement comes from:
- Vendor documentation. Trust centres, security pages, help centres, privacy policies, sub-processor lists and vendor blog posts. We report these as what the vendor states, not as verified fact.
- Published rule text. Regulators’ own pages, such as the eCFR for SEC rules, FINRA’s rulebook, the FCA Handbook and EUR-Lex.
Where we can, we give the source and the date we saw it. Where a page shows no date we say it is undated. Where the pages we reviewed are silent on a point, we say that, rather than guessing, and we turn the gap into a question you can put to the vendor. Our Fellow, Grain and Avoma reviews show this format.
What we do not do
- We do not audit vendors or test their products. A badge reflects what a vendor says, not an independent assessment by Attestly.
- A missing badge means we found no statement, not that the vendor lacks the feature.
- We do not give legal, regulatory or compliance advice. Confirm what applies to your firm with a qualified professional.
Referral partnerships and the order of listings
Vendor participation in the directory is free. Some vendors run referral or affiliate programmes. If you sign up through one of those links, Attestly may earn a commission at no extra cost to you, and those links are marked as sponsored. Listings with a referral partnership are shown first by default. Commission status does not change how a tool is described or rated, and it is not a badge or a filter.
Keeping information current
Vendors change their pages, plans and certifications. Our pages carry a date for when they were last reviewed or updated, and the directory shows when its content was last fact-checked. Statements are dated “as at” the day we read the source. Always check the vendor’s current documentation before relying on a point.
Corrections
If you spot something out of date or wrong, email hello@attestlyhq.com with what has changed and a source we can check. We review every request and correct genuine errors promptly. Vendors are welcome to do the same.
Start with the directory
Compare AI tools by documented security, training policy and archiving facts.
Browse the directorySee also our Terms of Use and Privacy Policy.