Ansvar AI

What Ansvar AI does

Ansvar AI operates an auditable workflow infrastructure platform for regulated work, built around a hosted Model Context Protocol (MCP) Gateway at gateway.ansvar.eu/mcp that routes structured Tool Calls from customers' existing AI clients — Claude, ChatGPT, Copilot Studio, Cursor, Gemini, Mistral Le Chat, Azure AI Foundry, and Claude Code — to a curated fleet of downstream MCP servers covering regulatory, legal, and security data sources. Founded in 2025 and headquartered in Fränsta, Sweden (Ansvar Systems AB, Org.nr 559547-2225), the company targets three buyer groups: enterprise security and compliance teams assessing against DORA, NIS2, ISO 27001, and GDPR; product security and engineering teams running STRIDE threat models, TARAs, Cyber Resilience Act work, and ISO 21434 for automotive cybersecurity; and privacy professionals conducting GDPR Article 35 DPIAs across 29 European jurisdictions. The product's defining architectural rule is that Ansvar does not host its own model; instead, every factual finding must cite official law, an SIS-licensed ISO clause, or a hash-anchored customer document paragraph, or remain explicitly unresolved. Workflows covered include gap analysis, jurisdiction-aware DPIA, threat modeling (STRIDE/LINDDUN/TARA), document review, regulatory intelligence monitoring, and a control library, with an open-source Agent Skills catalogue released under CC BY 4.0.

The business model is a freemium SaaS with five monthly tiers — Free (€0, one workflow run per month), Solo (two runs), Premium (five runs), Team (per-seat document library and review gates), and Company (per-seat, with the cryptographically auditable Audit Ledger featuring hash-chaining, daily Merkle root computation, RSA-PSS co-signing, and RFC-3161 timestamping via DigiCert). Monetisation is supplemented by a per-seat, per-standard ISO add-on at €99 per standard per month — covering SS-EN ISO/IEC 27001:2023, 27002:2022, 27005:2024, 42001:2026, and SS-ISO/SAE 21434:2021 licensed from the Swedish Institute for Standards — and by an Expert Delivery service in which Ansvar practitioners run and review assessments for customers. Distribution combines self-serve PLG with public listings on AWS Marketplace (Legal & Compliance and AI Security categories) and OpenAI's ChatGPT Apps directory (both 17 Aug 2026), and is augmented by OWASP GenAI Security Solutions Landscape inclusion, a CSA STAR Level 1 self-assessment, and the ECSO Cybersecurity Made in Europe label. All customer data and processing sit within the EEA on Hetzner infrastructure in Helsinki with off-site backups in Finland, Germany, and France; SIS, Hetzner, Microsoft, Stripe, Cloudflare, and Scaleway are the disclosed sub-processors.

Name

Ansvar AI

Legal name

Ansvar Systems AB

Website

https://ansvar.eu

Company type

Private

Founded year

2025

Operating status

Operating

Headcount range

1–10 employees

Short description

Ansvar AI operates a hosted MCP Gateway that routes queries from customers' existing AI clients (Claude, ChatGPT, Copilot, Cursor) to curated regulatory, legal, and security data sources, returning citation-enriched compliance assessments for enterprise security, product security, and privacy teams in Europe.

Ownership category

akta.pro rank

Product category

Regulatory Compliance Software

NAICS

Computer Systems Design and Related Services (5415), Custom Computer Programming Services (541511)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA)

akta.pro secondary industries

Enterprise AI Governance, Risk & Compliance Platforms (Model Risk, Audit, Policies) (HDAEANAE), Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA), Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

Keywords

• Regulatory compliance software
• AI workflow infrastructure
• Audit management software
• Governance risk compliance
• Threat modeling software

Headquarters

HQ city

Fränsta

HQ country

Sweden

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Core platform subscription (SaaS): Multi-tier subscription model (Free, Solo, Premium, Team, Company) providing access to the MCP gateway and regulatory data sources. Higher tiers unlock document upload, team collaboration, and audit ledger features. Starting price of €0 for free tier.
2. ISO Standards add-on: Per-seat, per-standard subscription add-on at €99 per standard per month, providing access to licensed ISO clause and control text from SIS. Available to named individuals on any plan including Free, or to machine identities on Team/Company plans.
3. Expert delivery services: Ansvar workflows run and reviewed by Ansvar's own team of practitioners, providing finished assessments for customers who need expert delivery rather than self-serve execution.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

Ansvar AI sells a hosted MCP (Model Context Protocol) Gateway at gateway.ansvar.eu/mcp that connects existing AI clients (Claude, ChatGPT, Copilot Studio, Cursor, Gemini, Azure AI Foundry) to a curated fleet of regulatory, legal, and security data sources. Through this gateway, customers run structured compliance assessments — gap analyses against DORA, NIS2, ISO 27001, and GDPR; jurisdiction-aware Data Protection Impact Assessments across 29 European jurisdictions; STRIDE/LINDDUN/TARA threat models; and cited document reviews. Every factual finding cites its evidence in official-source law or hash-anchored customer document paragraphs, or is explicitly marked unresolved.

Product overview

Ansvar AI is an auditable workflow infrastructure for regulated work, consisting of a hosted MCP Gateway (the core product) through which organizations run structured compliance assessments against DORA, NIS2, GDPR/DPIA, ISO 27001, and other frameworks, grounded in official-source legal text. The platform comprises the core Ansvar Gateway (an OAuth-authenticated MCP endpoint routing to curated regulatory data sources), the Standards Module (a paid SIS-licensed ISO add-on delivering clause-level text from five ISO standards), and multiple sub-product workflow engines (Regulatory Gap Analysis, Jurisdiction-Aware DPIA, Threat Modeling/TARA, Regulatory Intelligence, Document Review, Control Library) — all accessible through connected MCP-compatible AI clients (Claude, ChatGPT, Copilot Studio, Cursor, Gemini, etc.). Expert Delivery offers practitioner-run assessments as a managed service, and Agent Skills package the compliance workflows as reusable markdown skill files (CC BY 4.0) for AI agents. The Audit Ledger (Company tier) provides a cryptographically tamper-evident audit trail for compliance evidence.

Differentiator

Problem solved

Functional benefit

Products and services

• Ansvar Gateway

Quantifiable outcome

• Assessment findings are source-auditable — every factual finding cites its evidence or is marked unresolved
• +2 more outcomes

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

AI capability4 records

Feature8 records

Partnerships

Twelve partnerships are on record, tiered minor and core.

• OpenAI (ChatGPT Apps directory)minorChannel Partner/ Reseller/ Distributor · 17 August 2026Ansvar Gateway publicly listed in OpenAI's ChatGPT Apps directory (August 2026), allowing ChatGPT users to add the gateway and invoke it in any chat using @Ansvar Gateway.
• AWS MarketplaceminorChannel Partner/ Reseller/ Distributor · 17 August 2026Ansvar Gateway publicly listed on AWS Marketplace (August 2026) under Legal & Compliance and AI Security categories. Free listing linking AWS accounts to free Ansvar accounts, expanding distribution to AWS customers.
• Scaleway S.A.S.coreOthers · 12 August 2026Off-site backup storage (disaster recovery) — daily add-only mirror of infrastructure backups in France (fr-par region, EEA). Also provides transactional email services (account, billing, security notifications). Added to sub-processor roster August 2026.
• SIS — Swedish Institute for StandardscoreTechnology or IntegrationExclusive licensing agreement allowing Ansvar to reproduce selected clause and control text from SIS-published ISO standards (27001, 27002, 27005, 42001, 21434) for delivery through the Ansvar gateway to entitled customers. SIS is the Swedish member of ISO and CEN and retains copyright. Ansvar is a licensed supplier, not the owner.
• Hetzner Online GmbHcoreOthersCloud infrastructure and hosting provider. Production Kubernetes cluster (compute, hosting, key-management, audit-ledger database) located in Finland (Helsinki). Encrypted off-site backups in Germany (Falkenstein). Processing within the EEA, no transfer mechanism required.
• Microsoft Ireland Operations LimitedcoreOthersAzure Blob Storage for off-site backup storage (disaster recovery) in North Europe region (Ireland, EEA). Also provides Microsoft 365 productivity and email tooling. Transfer mechanisms include EU SCCs and EU–US Data Privacy Framework.
• Cloudflare, Inc.coreOthersTLS termination, CDN, WAF, and DDoS protection. EU edge for TLS termination with some routing/processing in the US. Covered by EU–US Data Privacy Framework and EU SCCs (Module 2/3) as fallback.
• StripecoreOthersPayment processing for paid subscriptions. Processing primarily in Ireland (EEA), with onward processing to Stripe, Inc. (US). Covered by EU SCCs and EU–US Data Privacy Framework.
• DigiCert, Inc.minorOthersRFC-3161 timestamping authority for the Company Audit Ledger feature. Receives only the daily aggregate Merkle root imprint and protocol metadata — no tenant identifier, no per-receipt hash, no Ledger content. No Personal Data transferred. Classified as ancillary recipient, not a sub-processor.
• Weights & Biases (W&B Weave) / RegenoldminorStrategic or Co-development PartnerFeatured in Regenold and W&B Weave workflow report on Reliable AI Agents in regulatory life science workflows, demonstrating integration use case in regulated life sciences sector.
• Cybernode ABcoreStrategic or Co-development PartnerParent company of Ansvar AI. Part of the Cybernode group based in Sweden, providing the organizational backbone for Ansvar's operations.
• Cyberhive EuropeminorStrategic or Co-development PartnerPartner listed in Ansvar's brand ecosystem, co-marketed under the Cyberhive Europe vendor ecosystem.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Sprinto: Sprinto automates SOC 2, ISO 27001, HIPAA and GDPR compliance for SaaS companies with continuous monitoring and evidence collection. Direct peer on the compliance-as-a-service delivery model.
• Vanta: Vanta is a leading automated compliance platform covering SOC 2, ISO 27001, HIPAA, and other frameworks with continuous monitoring and evidence collection. Directly comparable as a compliance automation vendor targeting enterprise security teams, though its framework breadth skews US-centric.
• Drata: Drata automates SOC 2, ISO 27001, HIPAA, GDPR and other compliance audits with continuous control monitoring. Closely comparable on enterprise compliance automation workflow, with similar self-serve SaaS GTM and AI-assisted audit features.
• Secureframe: Secureframe provides compliance automation for SOC 2, ISO 27001, HIPAA, PCI and others with policy templates and auditor integrations. Direct peer for the gap-analysis and audit-evidence workflow use case.
• Securiti: Securiti is a unified data privacy, security and AI governance platform offering DPIA automation, data mapping, and AI compliance tooling. Highly comparable on the privacy/DPIA workflow and AI governance positioning.
• Credo AI: Credo AI is an AI governance and compliance platform that operationalizes AI risk assessments aligned to EU AI Act, NIST AI RMF, and ISO 42001. Directly comparable on AI GRC and AI Act compliance workflows.
• Holistic AI: Holistic AI provides an AI governance, risk and compliance platform covering AI Act, NIST AI RMF, and ISO 42001 with assessments, policy automation and audit trails. Overlaps directly with Ansvar's AI compliance and ISO 42001 positioning.
• Hyperproof: Hyperproof is a compliance operations platform that helps organizations manage controls, evidence and audits across multiple frameworks including ISO 27001, SOC 2 and GDPR. Comparable on evidence collection and audit-ready workflow.
• Laika: Laika offers a compliance platform with a focus on infosec and privacy frameworks plus an integrated auditor marketplace. Comparable on the GRC automation and audit-evidence workflow angle.

Broad incumbents

• OneTrust: OneTrust is the broad incumbent in privacy, GRC, ethics, and trust intelligence platforms, with deep DPIA, consent, and AI governance capabilities. Overlaps directly on DPIA, third-party risk, and EU compliance but offers a much wider product portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/Ansvar-Systems
• LinkedInlinkedin.com/company/ansvar-systems

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Ansvar AI