AI-SPM vs AI Governance Platform
AI Governance Platform is top-down policy + risk register for AI use. AI-SPM is the broader programme that adds asset discovery, adversarial testing, runtime gateway controls, and control-ID compliance evidence.
Last reviewed September 2026
What AI-SPM vs AI Governance Platform really means
AI Governance Platform addresses one part of AI risk. What it leaves uncovered is the rest of the AI surface: governs the paperwork layer but does not perform adversarial testing, does not run a runtime gateway, does not auto-discover AI assets.
How Penaxtra closes the gap
AI-SPM covers the AI-specific layer directly: 11 AI asset kinds today, adversarial testing scored by deterministic checks, a self-hosted runtime gateway, and control-ID evidence across seven frameworks. It usually runs alongside AI Governance Platform, since the two address different layers. Plans and what each tier includes are on the pricing page.
What Penaxtra adds
Self-hosted runtime gateway with Ed25519-signed policy distribution
Deterministic checks on every adversarial response; a three-judge panel (Anthropic, OpenAI, Google) is built for cases that need model scoring and shipped switched off on every adversarial finding
Six-framework compliance mapping at control-ID level
PDF + JSON audit-evidence export with twenty-five cross-framework overlaps
Compliance coverage compared
AI-SPM evidence stands alongside AI Governance Platform findings; the two cover different ground and are used together.