AI-SPM vs AI Governance Platform
AI Governance Platform is top-down policy + risk register for AI use. AI-SPM is the broader programme that adds asset discovery, adversarial testing, runtime gateway controls, and control-ID compliance evidence.
Last reviewed July 2026
What AI-SPM vs AI Governance Platform really means
AI Governance Platform addresses one part of AI risk. What it leaves uncovered is the rest of the AI surface: governs the paperwork layer but does not perform adversarial testing, does not run a runtime gateway, does not auto-discover AI assets.
How Penaxtra closes the gap
AI-SPM covers the AI-specific layer directly: 11 AI asset kinds today, three-judge adversarial testing, a self-hosted runtime gateway, and control-ID evidence across six frameworks. It usually runs alongside AI Governance Platform, since the two address different layers.
What Penaxtra adds
Self-hosted runtime gateway with Ed25519-signed policy distribution
Three judges (Anthropic, OpenAI, Google) + meta-judge consensus on every adversarial finding
Six-framework compliance mapping at control-ID level
PDF + JSON audit-evidence export with twenty-two cross-framework overlaps
Compliance coverage compared
AI-SPM evidence stands alongside AI Governance Platform findings; the two cover different ground and are used together.