Register, classify, and monitor every AI agent in your organization
One platform to inventory every agent, certify compliance against any framework, and capture every LLM request to manage risk and comply with regulations.
No credit card. No spam. Early access only.
Every team is deploying AI agents. No one has a complete inventory.
Engineering ships agents faster than security can review them. There's no registry, no audit trail, and no way to prove compliance when regulators come knocking.
- Agents tracked in spreadsheets and Confluence pages
- Compliance evidence gathered manually before each audit
- LLM costs discovered in monthly cloud bills
- No visibility into what models agents call or what data they send
- Policy violations are a data analytics project
- Every agent registered with owner, model, risk tier, and dependency graph
- Continuous certification against EU AI Act, SOC 2, HIPAA, ISO 42001
- Every LLM request captured with latency, tokens, and cost
- PII detection, policy violations, and alerts within seconds
- Real-time monitoring and enforcement with policy-as-code
Four modules. One control plane.
Agent Registry
Register every agent with framework, model, owner, team, and deployment URL. Classify by risk tier. Search by natural language. See the dependency graph.
Learn moreCompliance & Certification
Map agents to EU AI Act, SOC 2, HIPAA, ISO 42001, or any custom framework. Continuous drift detection checks every 15 minutes. Export audit-ready evidence in one click.
Learn moreObserver & LLM Monitor
Capture every tool call, shell command, and file write from local dev agents. Route LLM requests through a monitoring proxy. Detect PII, enforce policies, alert on violations.
Learn moreDashboard
Total agents, compliance posture, active violations, LLM spend, and request volume, all in one view. Filter by team, framework, or risk tier. Share with your board.
Learn moreThree questions. One platform.
"How many AI agents do we have?"
Open the registry. Filter by team, framework, or risk tier. Export the list. Under 2 minutes.
"Can we prove compliance for every agent?"
Every agent mapped to its framework. Drift detected every 15 minutes. Evidence exported in one click.
"What are we spending on LLM calls?"
Every request logged with model, tokens, and cost. Broken down by agent, team, and provider. No surprises.
From shadow agents to full visibility in minutes
See every agent across every team
Register agents with framework, model, owner, risk tier, and deployment URL. Search by natural language. View the full dependency graph: which agents call which models, tools, and APIs.
Explore the registryCertify against any framework, continuously
Map every agent to EU AI Act, SOC 2, HIPAA, or ISO 42001. Drift detection runs every 15 minutes. When something changes, you know immediately, not at the next audit.
See compliance engineCapture every prompt, every model, every cost
Route LLM traffic through a lightweight proxy. See which agents call which models, how many tokens they use, and what they cost. Detect PII in requests. Enforce policies before they reach the model.
See the monitorRetire agents without leaving compliance gaps
When an agent is deprecated or decommissioned, Roval preserves its full compliance record, manages succession to replacement agents, and closes the audit trail cleanly. No orphaned agents. No compliance gaps.
See lifecycle managementYour first 30 days with Roval
New governance software shouldn't take months to implement. Here's what you can get done in just 30 days.
Every agent inventoried
One environment variable to install. Your first 20 agents registered with owners, models, and dependencies mapped.
Risk classified, compliance mapped
Every agent scored by risk tier. High-risk agents certified against EU AI Act, SOC 2, or HIPAA. Drift detection running every 15 minutes.
One answer for every stakeholder
Your board asks how many agents you have. Your CISO asks if they're compliant. Your CFO asks what they cost. One dashboard, three answers.
Built for the industries where AI governance isn't optional
Different regulators, different frameworks, same platform. Roval maps your agents to the exact compliance requirements your industry demands.
Financial services
SEC model risk management, MiFID II algorithmic trading rules, SOX audit trails. Your AI agents must comply before they trade, advise, or process transactions.
Healthcare and life sciences
AI agents handling PHI, clinical decisions, and EHR integrations need governance that matches the stakes. Detect PHI in every prompt. Track HIPAA compliance continuously.
Technology and SaaS
Engineering ships agents across LangChain, CrewAI, AutoGen, and custom frameworks faster than security can review them. One registry, one compliance layer, full cost attribution.
Latest research
Agent memory poisoning: the OWASP ASI06 threat every framework missed until 2026
Microsoft caught 31 companies poisoning AI memory in 60 days. None of them were threat actors. The MINJA research achieves 98% injection success against GPT-4. OWASP put memory poisoning at ASI06 in their 2026 Top 10 for Agentic Applications. Quarterly audits run on the wrong cadence to catch any of it.
Read articleThe lethal trifecta: governing the three capabilities you can't remove
Five days in January 2026, four AI productivity tools shipped indirect prompt injection vulnerabilities. Same pattern in every case. Simon Willison named it in June 2025: private data access plus untrusted content plus external communication equals data exfiltration. You can't remove any leg without breaking the agent. Governance has to shift from prevention to containment.
Read articleSR 26-2 lands: agentic AI was carved out. Here's what banks running agents should do today
Banks waited fifteen years for an SR 11-7 successor. They got SR 26-2 on April 17. Footnote 3 explicitly excludes generative and agentic AI from the guidance. The agencies' AI-specific RFI is coming 'in the near future.' Banks running agents in production right now have no formal guidance and supervisory expectations regardless.
Read articleHelp shape the State of AI Agent Governance 2026
We're surveying engineering, security, and compliance leaders on how organizations govern AI agents today. Participants receive the full report before public release.
Know what your agents are doing.
Join the private beta. Set up takes under 10 minutes.