Evidence tier Source Confirmed · 7 captures on record
What the publisher says
As described on Microsoft Marketplace.
Govern360 is a policy decision and evidence plane for enterprise AI. It discovers the
AI in your organization - users, models, agents, non-human identities, and MCP tool
Show the rest of the publisher’s description (19 more lines)
access - then compiles governance intent into native enforcement configuration for
platforms you already operate.
Govern360 decides and compiles. Your existing planes enforce. It does not proxy
traffic and does not hold standing write credentials.
Designed to:
- Surface shadow AI across SaaS, browser, endpoint, identity, and agent surfaces
- Govern AI agents and non-human identities, including MCP tool-call access
- Compile policy into Microsoft Purview, Intune, SASE, and AI gateway configuration
- Attribute token consumption to teams and produce a per-team AI bill
- Collect continuous compliance evidence mapped across six frameworks
Compliance coverage includes EU AI Act, ISO/IEC 42001, NIST AI RMF, SOC 2, HIPAA,
and GDPR control mapping. EU AI Act readiness reflects obligations as currently
published and remains subject to the EU Digital Omnibus process; customers remain
responsible for their own regulatory compliance.
Capabilities are described as designed or built to perform the stated functions and
are not guarantees of any particular outcome. Token budgets alert and capture
evidence; they do not block usage.
AIVONS is SOC 2 Type II audit in progress, architected to the applicable Trust
Services criteria, and ISO/IEC 42001-aligned.
Preview
5 images
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment
Plans and pricing as listed
3 listed- Pricing: $60,000 per year, covering up to 500 governed seats. Deployments above 500 seats are priced by volume band - contact info@aivons.com for a quote.
- Pricing: $96,000 per year, covering up to 500 governed seats and 50 governed agents. Additional governed agents are metered. Deployments above 500 seats are priced by volume band - contact info@aivons.com for a quote.
- Pricing: $36,000 per year, covering up to 500 governed seats. Deployments above 500 seats are priced by volume band - contact info@aivons.com for a quote.
Sources
Publisher resources
4 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.