CAIN-42 · For large organisations

Continuous Regulatory Compliance-as-a-Service (EU AI Act & ISO 42001)

Ongoing EU AI Act and ISO 42001 evidence, delivered as a service.

Last reviewed 2026-10-01

Available Commercial channels · Commercial channel

What it is

Business-plan channel. Implementation status varies: several are prototypes or plans (e.g. insurance has no insurer behind it). Check the claims registry before quoting.

Where it fits

Part of For large organisations: Compliance, private deployment, SIEM and advisory. Every CAIN-42 product runs behind the same rule: an AI agent's action is checked before it runs (identity, authority, policy, risk), decided as allow, hold for a human, or block, and recorded as signed evidence. Unknown or error never becomes allow.

Use it

Open it https://cainstudio.online/eu_ai_act.html

Recorded status: business plan. "Live" on this page means its link answered when the catalog was last checked (2026-10-01T18:22 UTC).

Live now

Checked from your browser when this page opened, not from a cached list.

Fire a real decision

Send an action through the live CAIN-42 pipeline from this page, with no account, and watch every stage decide. This is the same pipeline every product here sits behind; it runs for a throwaway demo tenant and is rate limited.

For AI engineers

Every product sits behind one decision path: your agent proposes an action with the exact arguments, CAIN runs it through identity, authority, policy, risk, trust and quorum consensus, and answers ALLOW, REQUIRE_APPROVAL or DENY with an Ed25519-signed record. A timeout, outage or unknown verdict never becomes ALLOW. A brand-new agent has no trust history, so its first actions usually come back REQUIRE_APPROVAL.

Python (zero dependencies)

pip install https://cainstudio.online/cainstudio-0.3.0-py3-none-any.whl
export CAIN_API_KEY=...   # free key: https://cainstudio.online/signup

import cainstudio

@cainstudio.guard()
def transfer(amount_usd: float, to: str) -> str:
    ...  # runs only if CAIN allows this call, with these arguments

try:
    transfer(5000, "acme")
except cainstudio.ApprovalRequired as e:
    print("held for a human:", e.approval_id)
except cainstudio.ActionBlocked as e:
    print("refused:", e.decision.reasons)
except cainstudio.CainUnavailable:
    print("CAIN unreachable: not run")   # fail-closed

See a real decision with no account

cainstudio try          # live pipeline, stage by stage
cainstudio try --list   # the other attack scenarios

MCP clients (Claude Code, Cursor)

claude mcp add --transport http cain https://cainstudio.online/mcp

More: Python SDK · TypeScript SDK · framework integrations · AI quickstart · decision signing key

Tested guarantees in this area

Every rule in these niches has its own page with its recorded result.

Policy, law & governance: 966 tested invariants — The rules agents must follow, and how they are enforced.
Transactions, markets & economics: 664 tested invariants — Agents that buy, sell, bid and pay, within limits.

Actuarial Cyber Insurance Underwriting Protocol — A protocol for scoring AI-agent risk the way insurers score cyber risk (prototype, no insurer yet).
MCPGate Sovereign Enterprise Appliance (Air-Gapped Kubernetes) — MCPGate as a private appliance for your own Kubernetes or air-gapped network.
Self-hosted CAIN — Run CAIN inside your own network, next to your agents.
SIEM, chat & alert forwarding — Sends every block and hold to Sentinel, Datadog, Slack or Teams, signed.
Single sign-on & SCIM — Sign in with your company login (Okta, Entra, Google) and keep users in sync automatically.
UsageLedger — Usage metering, tiered pricing and invoices for AI services.
Autonomous Swarm Fleet Quarantine & Emergency Kill-Switch SLAs — Stop a whole fleet of agents at once, with an agreed response time.
Confidential Computing Hardware Enclave Remote Attestation Notary — Prove an agent ran inside trusted hardware (planned; no hardware enclave behind it yet).
Enterprise SIEM & SOC Connectors — Connectors that feed CAIN events into your security operations center.
Governed Agent Memory & Vector Sanitization Service — Cleans agent memory and vector stores of planted instructions, as a service.

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem

Continuous Regulatory Compliance-as-a-Service (EU AI Act &amp; ISO 42001)