AI Tools

The pain an AI tool inventory is solving

Most executives can name five AI tools their company uses. Most companies are running forty or more, because AI no longer arrives as a purchase decision. It arrives as a feature switched on inside software already deployed: the meeting recorder that started summarizing, the CRM that started drafting, the design tool that started generating. Nobody approved these as AI. Nobody inventoried them. That gap between the tools leadership can name and the tools actually running is shadow AI, and it is where the governance failures live: the transcript nobody consented to, the source code pasted into a public model, the customer data flowing through a vendor no one vetted.

Every governance framework worth aligning to, from ISO/IEC 42001 to the NIST AI RMF, starts from the same prerequisite: you cannot govern what you have not listed. The inventory comes first. This catalog exists to make that first step faster, it is the reference list we work from when building an AI tool inventory for a client, and the discipline behind it is the subject of Volume I of The Operating Discipline for AI Library.

How to use this catalog

Tools are grouped by category and listed with vendor, vendor headquarters, and a short note on what the tool does plus the governance flag it most often raises. Vendor headquarters is listed because jurisdiction is a governance fact: it determines which data-transfer, privacy, and cross-border rules apply. Notes reading “cross-border data review advised” mark tools from vendors whose home jurisdiction warrants a data-flow review before business data touches them. This is a reference catalog, not an endorsement list; presence here means a tool is common enough in the field that it belongs on an inventory checklist, nothing more.

AI Governance & Risk Management Platforms

• Arize AI (Arize AI, US) — ML observability; LLM tracing; evaluation framework; prompt monitoring.
• Arthur AI (Arthur AI, US) — Model monitoring and governance; bias mitigation; fairness metrics; compliance reporting.
• Credo AI (Credo AI, US) — Purpose-built AI governance; policy packs for EU AI Act, NIST AI RMF; clean interface; fast deployment.
• Fiddler AI (Fiddler, US) — Model performance management; explainability; bias detection; drift monitoring; LLM observability.
• Holistic AI (Holistic AI, UK) — Bias auditing, risk management, compliance; strong technical depth; mid-market focus.
• IBM OpenPages with Watson (IBM, US) — Full GRC platform with AI-specific modules; risk assessment; regulatory mapping; Watson AI automated documentation.
• Monitaur (Monitaur, US) — Model monitoring with built-in governance; unified monitoring + governance platform.
• OneTrust AI Governance (OneTrust, US) — Privacy-first approach; strong data governance; compliance automation; good for privacy-primary orgs.
• ServiceNow AI Governance (ServiceNow, US) — Built into Now Platform; model inventory; risk scoring; approval workflows; best for existing ServiceNow shops.
• WhyLabs (WhyLabs, US) — Data-centric AI observability; statistical profiling; privacy-preserving monitoring.

Automation & Agents

• Apify (Apify, Czech Republic) — Web scraping platform; actor marketplace; automation; EU-hosted; GDPR.
• Automation Anywhere (Automation Anywhere, US) — Intelligent automation platform; AI-powered bots; control room governance; credential vault.
• Bardeen (Bardeen, US) — Browser automation AI; web scraping; personal productivity; data exposure risk.
• Blue Prism (SS&C Blue Prism, UK) — Enterprise RPA; digital workforce; centralized control; UK-hosted; GDPR relevant.
• Browse AI (Browse AI, Canada) — Web scraping automation; data extraction; monitoring; terms-of-service compliance risk.
• Make (Integromat) AI (Make, Czech Republic) — Visual automation platform; AI integrations; EU-hosted options; GDPR workflow compliance.
• Manus (Manus AI, Singapore) — Autonomous agent; high decision-influence.
• Microsoft Power Automate AI (Microsoft, US) — Enterprise workflow automation; Copilot integration; M365 data access; DLP integration.
• n8n (n8n, Germany) — Workflow automation; agentic actions.
• UiPath AI (UiPath, US) — RPA + AI platform; document understanding; process mining; enterprise automation governance.
• Zapier AI (Zapier, US) — Workflow automation with AI; 7000+ app integrations; data flow governance; cross-app exposure.
• Zapier Central (Zapier, US) — Workflow automation; agentic actions.

Chat & General LLMs

• 01.AI Yi (01.AI, China) — Chinese open-source LLM; Kai-Fu Lee founded; cross-border data review advised.
• AI2 OLMo (Allen Institute for AI, US) — Open-source language model; fully open training data; research transparency; nonprofit.
• Aleph Alpha (Aleph Alpha, Germany) — European sovereign LLM; EU-hosted; GDPR-first; multilingual; Luminous model family.
• Apple Intelligence (Apple, US) — On-device LLM; Private Cloud Compute; Apple silicon; minimal data exposure; privacy-first.
• Baichuan (Baichuan AI, China) — Chinese open-source LLM; medical and legal fine-tunes; cross-border data review advised.
• Cerebras (Cerebras, US) — Wafer-scale AI compute; inference API; on-prem options; high-performance computing.
• Character.ai (Character.AI, US) — Persona chat; HR/appropriate-use risk.
• ChatGPT (OpenAI, US) — General LLM assistant.
• Claude (Anthropic, US) — General LLM assistant.
• Cohere Coral (Cohere, Canada) — Enterprise chat AI; RAG-native; data privacy focus; Canadian vendor.
• Databricks DBRX (Databricks, US) — Open-source general LLM; Mixture-of-Experts; enterprise training; already noted in Data & Analytics.
• DeepSeek (DeepSeek AI, China) — Open-weight MoE; cross-border data review advised.
• Falcon (TII) (Technology Innovation Institute, UAE) — UAE-hosted open-source LLM; sovereign AI; Apache 2.0; Middle East data residency.
• Fireworks AI (Fireworks AI, US) — Fast inference API; open-source models; enterprise deployment; cost optimization.
• Gemini (Google, US) — General LLM assistant.
• Grok (xAI, US) — General LLM assistant.
• Huawei PanGu (Huawei, China) — Chinese foundation model; cross-border data review advised; Ascend chip optimization.
• HyperWrite (HyperWrite, US) — Writing assistant + agent.
• iFlytek Spark (iFlytek, China) — Chinese voice+language AI; speech recognition; cross-border data review advised.
• InternLM (Shanghai AI Lab) (Shanghai AI Laboratory, China) — Chinese open-source LLM; academic research; cross-border data review advised.
• JAIS (G42 / Inception) (G42 / Inception, UAE) — Arabic-centric LLM; UAE sovereign AI; cultural alignment; Middle East data governance.
• Janitor AI (Janitor AI, US) — Persona chat; HR/appropriate-use risk.
• Kimi (Moonshot AI, China) — Long-context reasoning; cross-border data review advised.
• Llama (Meta) (Meta, US) — Open-weight model family; often self-hosted.
• LMSYS Arena Models (LMSYS, US) — Model evaluation platform; crowdsourced benchmarking; research transparency; no production use.
• Microsoft Copilot (Microsoft, US) — Embedded across M365.
• Mistral / Le Chat (Mistral AI, France) — EU-hosted option; GDPR relevant.
• Notion AI (Notion Labs, US) — Embedded in workspace/knowledge base.
• NVIDIA Nemotron (NVIDIA, US) — Enterprise LLM family; synthetic data generation; GPU-optimized; self-hosted options.
• Perplexity AI (Perplexity, US) — Search-augmented LLM.
• Pi (Inflection AI, US) — Conversational assistant.
• Poe (Quora, US) — Multi-model aggregator.
• Replicate (Replicate, US) — Model hosting and inference API; open-source models; community models; content policy.
• SambaNova (SambaNova Systems, US) — Enterprise AI hardware+software; DataScale platform; on-prem deployment; sovereign AI.
• Samsung Gauss (Samsung, South Korea) — On-device LLM; Galaxy AI; personal data processing; Korean vendor; local processing.
• SaulLM (Saul) (Saul, France) — French legal-domain LLM; specialized training; EU data governance.
• SenseTime SenseChat (SenseTime, China) — Chinese multimodal LLM; computer vision integration; cross-border data review advised.
• Slack AI (Salesforce, US) — Embedded in messaging; message-corpus exposure.
• Snowflake Arctic (Snowflake, US) — Enterprise-focused LLM; Apache 2.0 license; data cloud integration; commercial use.
• Together AI (Together AI, US) — Decentralized cloud for open models; inference API; model hub; data residency options.
• You.com (You.com, US) — Search-augmented LLM.
• Zoom AI Companion (Zoom, US) — Meeting summarization; recording consent relevant.

Chinese Foundation Models

• Doubao / Seed (ByteDance) (ByteDance, China) — Cross-border data review advised.
• ERNIE (Baidu) (Baidu, China) — Cross-border data review advised.
• GLM / Z.AI (Zhipu AI) (Zhipu AI, China) — Cross-border data review advised.
• Hunyuan (Tencent) (Tencent, China) — Cross-border data review advised.
• MiMo (Xiaomi) (Xiaomi, China) — Cross-border data review advised.
• MiniMax (MiniMax, China) — Cross-border data review advised.
• Qwen / Tongyi Qianwen (Alibaba) (Alibaba Cloud, China) — Cross-border data review advised.

Cloud AI Services & Model APIs

• AI21 Labs API (AI21 Labs, Israel) — Jurassic models; enterprise API; data retention controls; compliance-focused.
• Amazon SageMaker (Amazon Web Services, US) — Full ML lifecycle management; model monitoring; bias detection; explainability tools.
• AWS Bedrock (Amazon Web Services, US) — Managed foundation model API service; IAM integration; VPC support; model evaluation tools; AgentCore for agent orchestration.
• Azure Machine Learning (Microsoft, US) — MLOps platform; AutoML; model registry; responsible AI toolkit integration.
• Azure OpenAI Service (Microsoft, US) — OpenAI models in Azure regions; enterprise content filtering; Entra ID integration; data residency controls.
• Cohere API (Cohere, Canada) — Enterprise-focused LLM API; strong on data privacy; RAG-optimized; multi-language support.
• Google Vertex AI (Google Cloud, US) — Unified ML platform; Model Garden; AutoML; MLOps lifecycle; BigQuery integration; TPU support.
• IBM watsonx (IBM, US) — Enterprise AI platform; watsonx.governance for agent inventory, behavior monitoring, hallucination detection; model-agnostic.
• NVIDIA NIM (NVIDIA, US) — Inference microservices for deploying foundation models; enterprise GPU optimization; self-hosted options.

Coding & Developer Tools

• Anthropic Console (Anthropic, US) — API management console; prompt testing; evaluation tools; usage monitoring; cost controls.
• AutoGen (Microsoft) (Microsoft, US) — Multi-agent conversation framework; agent orchestration; code generation; Microsoft Research.
• Bolt.new (StackBlitz, US) — App generation.
• Chroma (Chroma, US) — Open-source embedding database; local-first; lightweight RAG; self-hosted option.
• Claude Code (Anthropic, US) — Agentic coding; source-code exposure.
• Comet ML (Comet, US) — ML experiment management; model monitoring; production tracking; team collaboration.
• CrewAI (CrewAI, US) — Multi-agent framework; agent collaboration; task delegation; emerging governance patterns.
• Cursor (Anysphere, US) — AI IDE; source-code exposure.
• Dify (Dify, China) — LLM app development platform; workflow orchestration; open-source; cross-border data review advised.
• DSPy (Stanford NLP, US) — Prompt optimization framework; Stanford research; systematic prompt engineering; reproducibility.
• Flowise (Flowise, open source) — Visual LLM workflow builder; low-code RAG; self-hosted; no-code agent building.
• GitHub Copilot (Microsoft/GitHub, US) — Code completion; source-code exposure.
• Google AI Studio (Google, US) — Model prototyping.
• Hugging Face (Hugging Face, US) — Model hub; supply-chain/AIBOM relevant.
• LangChain (LangChain, US) — LLM application framework; agent orchestration; supply-chain risk; rapid breaking changes.
• LlamaIndex (LlamaIndex, US) — RAG framework; data connectors; indexing strategies; enterprise RAG governance.
• Lovable (Lovable, Sweden) — App generation.
• Neptune.ai (Neptune, Poland) — ML metadata store; experiment tracking; model registry; EU-hosted options.
• OpenAI API / GPT models (OpenAI, US) — Direct API; usage-based cost escalation risk.
• OpenAI Playground / Dashboard (OpenAI, US) — API testing environment; fine-tuning; usage tracking; team management; cost escalation risk.
• Pinecone (Pinecone, US) — Vector database; RAG infrastructure; data residency options; enterprise security.
• Relevance AI (Relevance AI, Australia) — No-code AI workforce; agent teams; task automation; APAC data residency.
• Replit Agent (Replit, US) — Agentic coding; source-code exposure.
• Stack AI (Stack AI, US) — No-code AI app builder; enterprise deployment; workflow automation; data connector governance.
• Tabnine (Tabnine, Israel) — Code completion; self-host option.
• v0 (Vercel) (Vercel, US) — UI generation.
• Voiceflow (Voiceflow, Canada) — Conversational AI design; voice/chat agent builder; enterprise team features.
• Weaviate (Weaviate, Netherlands) — Open-source vector DB; GraphQL interface; EU-hosted; GDPR; hybrid search.
• Weights & Biases (Weights & Biases, US) — ML experiment tracking; model registry; artifact lineage; MLOps governance.
• Windsurf (Cognition, US) — AI IDE; source-code exposure.

Data & Analytics AI

• Alteryx AI (Alteryx, US) — Analytics automation with AI; data blending; workflow governance; self-service analytics risk.
• Databricks AI / DBRX (Databricks, US) — Lakehouse AI; DBRX open model; MLflow governance; Unity Catalog data governance; strong lineage tracking.
• Dataiku (Dataiku, France) — Collaborative data science platform; MLOps; governance workflows; EU-hosted options; GDPR relevant.
• Palantir AIP (Palantir, US) — Enterprise AI platform; Ontology-based governance; defense/intel focus; high-stakes decision influence.
• Snowflake Cortex (Snowflake, US) — Native AI in data cloud; LLM functions; vector search; data residency controls; governance via Snowflake Horizon.
• Tableau AI (Einstein) (Salesforce, US) — BI embedded AI; natural language queries; CRM data integration; Trust Layer governance.

ERP & Business Application AI

• Oracle Fusion AI (Oracle, US) — Embedded AI across ERP, HCM, SCM; autonomous database; enterprise data governance.
• SAP Joule (SAP, Germany) — ERP copilot across S/4HANA, SuccessFactors, Ariba; Joule Studio for custom agents; Knowledge Graph integration; ledger-modification risk.
• ServiceNow Now Assist (ServiceNow, US) — ITSM/HRSD embedded AI; workflow automation; enterprise process governance.
• Workday AI (Workday, US) — HR and finance AI; skills-based talent; predictive analytics; sensitive HR data exposure.

Education & Research AI

• CheggMate (Chegg, US) — Study AI assistant; academic help; student data; content accuracy; honor code implications.
• Grammarly for Education (Grammarly, US) — Institutional writing support; student data; FERPA compliance; generative AI features.
• Khanmigo (Khan Academy) (Khan Academy, US) — Educational AI tutor; student interaction data; COPPA compliance; pedagogical bias.
• Turnitin AI Detection (Turnitin, US) — AI writing detection; academic integrity; false positive risk; student data privacy (FERPA).

Emerging / Frontier AI

• Cohere Command R+ (Cohere, Canada) — Enterprise RAG-optimized model; tool use; autonomous retrieval; data grounding verification.
• Computer Use (Anthropic) (Anthropic, US) — Computer control agent; desktop automation; system access; high-privilege operation risk.
• Devin (Cognition) (Cognition, US) — Autonomous software engineer; full codebase access; high decision-influence; security critical.
• Figure AI (Figure AI, US) — Humanoid robotics AI; physical world interaction; safety-critical; embodied AI governance.
• Mistral Large 2 (Mistral AI, France) — Advanced EU-hosted LLM; multilingual; GDPR-first design; sovereign AI option.
• Operator (OpenAI) (OpenAI, US) — Autonomous web agent; browser control; credential exposure; action authorization risk.
• Physical Intelligence (pi0) (Physical Intelligence, US) — General-purpose robot AI; physical task learning; safety-critical; emerging governance standards.
• Tesla Optimus (Tesla, US) — Humanoid robot; factory automation; physical safety; worker interaction; liability.

Enterprise AI Platforms & Agent Orchestration

• Aisera (Aisera, US) — AI service management platform; autonomous service desk; enterprise governance features.
• Cognigy (Cognigy, Germany) — Conversational AI platform for customer service; GDPR-compliant; EU-hosted options.
• Decagon (Decagon, US) — Customer support agent platform; omnichannel; model-agnostic; Watchtower monitoring.
• Glean (Glean, US) — Enterprise knowledge search AI; 100+ connectors; permission-aware retrieval; data access governance.
• Kore.ai (Kore.ai, US) — Enterprise agentic AI platform; multi-agent orchestration; comprehensive governance dashboard with audit logs, RBAC, and guardrails; 400+ Fortune 2000 customers.
• Moveworks (Moveworks, US) — Employee support automation; IT service desk agent; enterprise-grade access controls.
• Sierra (Sierra, US) — Conversational AI for customer experience; enterprise agent platform.
• Vellum (Vellum, US) — Personal AI assistant; on-device Mac app or cloud; cross-app memory; privacy-first design.

Finance & Legal AI

• AlphaSense (AlphaSense, US) — Market intelligence AI; financial research; insider information risk; MNPI controls needed.
• Bloomberg GPT (Bloomberg, US) — Finance-specific LLM; market data integration; proprietary data handling; trading decision risk.
• CoCounsel (Casetext) (Thomson Reuters, US) — Legal research AI; litigation support; Westlaw integration; attorney work product risk.
• Harvey AI (Harvey, US) — Legal AI assistant; contract drafting; case research; law firm data exposure; privilege concerns.
• Kira Systems (Litera, US) — Contract analysis AI; legal document review; attorney-client privilege risk; confidential data.
• Vanta (Vanta, US) — Security compliance automation; SOC 2, ISO 27001; continuous monitoring; audit automation.

HR & Talent AI

• Beamery (Beamery, UK) — Talent lifecycle management AI; skills ontology; DEI analytics; UK-hosted; GDPR relevant.
• Eightfold AI (Eightfold, US) — Talent intelligence platform; skills matching; DEI bias risk; high-stakes employment decisions.
• HireVue (HireVue, US) — Video interviewing AI; facial analysis controversy; algorithmic hiring bias; regulatory scrutiny.
• LinkedIn Recruiter AI (Microsoft/LinkedIn, US) — Talent acquisition AI; candidate matching; bias risk in hiring; GDPR for EU candidates.
• Paradox (Olivia) (Paradox, US) — Conversational recruiting AI; candidate screening; automated scheduling; hiring bias risk.

Healthcare & Life Sciences AI

• Epic AI (SlicerDicer, etc.) (Epic Systems, US) — Clinical decision support; patient data exposure; HIPAA critical; FDA SaMD considerations.
• Google Med-PaLM / MedLM (Google, US) — Medical LLM; clinical reasoning; healthcare data; HIPAA BAA required; diagnostic liability.
• Insilico Medicine (Insilico Medicine, Hong Kong) — Drug discovery AI; molecular design; IP generation; cross-border data (China/HK).
• Merative (formerly Watson Health) (Merative, US) — Healthcare data analytics; clinical AI; population health; PHI governance.
• Tempus AI (Tempus, US) — Precision medicine AI; genomic data; clinical trial matching; genetic privacy (GINA).

Image & Graphic Design

• Adobe Express AI (Adobe, US) — Lightweight design AI; quick content creation; Adobe Firefly integration; commercial-safe.
• Adobe Firefly (Adobe, US) — Image generation; commercial-safe training claim.
• Blender AI Add-ons (Blender Foundation, Netherlands) — 3D creation AI plugins; open-source; local processing; model provenance varies by plugin.
• Canva AI (Canva, Australia) — Design generation.
• Clipdrop (Stability AI) (Stability AI, UK) — Image editing AI suite; Stability AI ecosystem; open-weight tools; commercial licensing.
• DALL-E (OpenAI) (OpenAI, US) — Image generation; IP provenance relevant.
• DeepAI (DeepAI, US) — Image generation.
• Figma AI (Figma, US) — Design AI; auto-layout; content generation; design system governance; Adobe acquisition context.
• Freepik AI (Freepik, Spain) — Stock image AI generation; commercial licensing; EU-hosted; content moderation.
• Ideogram (Ideogram, Canada) — Text-in-image generation; typography AI; commercial use; IP and copyright considerations.
• Jasper Art (Jasper, US) — Marketing image generation; brand asset creation; commercial use; same vendor as Jasper copy.
• Krita AI (Krita Foundation, Netherlands) — Open-source digital art; local AI plugins; no cloud dependency; community governance.
• Leonardo.ai (Canva, Australia) — Image generation.
• Microsoft Designer (Microsoft, US) — Image/design generation.
• Midjourney (Midjourney, US) — Image generation; IP provenance relevant.
• Miro AI (Miro, US) — Collaborative whiteboard AI; diagram generation; sticky note synthesis; creative IP risk.
• Photoroom (Photoroom, France) — AI photo editing; background removal; e-commerce focus; EU data handling.
• Recraft (Recraft, UK) — Vector image generation; brand consistency; commercial design; UK-hosted.
• Remove.bg (Canva, Australia) — Image processing.
• Sketch AI (Sketch, Netherlands) — Design tool AI; macOS native; local processing option; EU design data.
• Stable Diffusion (Stability AI, UK) — Open-weight image model.

Notes, Knowledge & Meetings

• Asana AI (Asana, US) — Work management AI; goal tracking; team productivity analytics; data residency options.
• Avoma (Avoma, US) — Meeting intelligence AI; conversation analytics; coaching; revenue team data.
• Box AI (Box, US) — Enterprise content AI; metadata; governance; compliance; retention policies.
• Cisco Webex AI (Cisco, US) — Meeting intelligence; real-time translation; noise removal; enterprise security.
• ClickUp AI (ClickUp, US) — All-in-one productivity AI; document generation; task automation; broad data access.
• Coda AI (Coda, US) — All-in-one doc AI; automation; team data; enterprise governance features.
• Confluence AI (Atlassian, Australia) — Team wiki AI; smart links; automation; Atlassian Cloud governance.
• Dropbox AI (Dropbox, US) — Cloud storage AI; document summaries; team data; sharing controls.
• Fathom (Fathom, US) — Meeting notetaker AI; auto-summaries; CRM sync; consent and privacy.
• Fireflies.ai (Fireflies.ai, US) — Meeting transcription; consent relevant.
• Gong (Gong, US) — Revenue intelligence AI; call analysis; deal coaching; sensitive sales data exposure.
• Google Drive AI (Google, US) — Cloud storage AI; Gemini integration; Workspace data; sharing governance.
• Google Meet AI (Google, US) — Meeting summaries; live captions; note-taking; Google Workspace data.
• Grain (Grain, US) — Meeting recording AI; highlight clips; CRM integration; consent and sharing.
• Logseq AI (Logseq, open source) — Open-source knowledge base; local-first; graph database; privacy-focused.
• Mem (Mem Labs, US) — Personal knowledge base.
• Microsoft Teams AI (Microsoft, US) — Meeting recaps; intelligent recap; Copilot integration; M365 data exposure.
• Monday.com AI (monday.com, Israel) — Work OS AI; project automation; cross-functional data; Israeli data transfer considerations.
• NotebookLM (Google, US) — Document grounding; ingests uploaded corpora.
• Notion Q&A (Notion Labs, US) — Knowledge base AI Q&A; workspace corpus access; permission-aware but broad exposure risk.
• Obsidian AI (Obsidian, Canada) — Local-first knowledge AI; plugins; privacy-focused; no cloud dependency.
• Otter.ai (Otter.ai, US) — Meeting transcription; consent relevant.
• Read.ai (Read, US) — Meeting analytics AI; engagement scoring; wellness insights; behavioral data privacy.
• SharePoint AI (Microsoft, US) — Enterprise content AI; Copilot integration; M365 governance; DLP.
• Supernormal (Supernormal, US) — Meeting notes AI; action items; CRM sync; team productivity data.
• tl;dv (tl;dv, Germany) — Meeting recorder AI; timestamped notes; EU-hosted; GDPR; consent management.
• Trello AI (Atlassian) (Atlassian, Australia) — Project management AI; workflow automation; team data exposure; Atlassian Cloud governance.

Open Source & Self-Hosted Models

• Hugging Face Transformers (Hugging Face, US) — Model hub and inference library; supply-chain/AIBOM critical; model card verification; security scanning.
• llama.cpp (Georgi Gerganov, open source) — Lightweight LLM inference; C++ implementation; edge deployment; model provenance tracking.
• Ollama (Ollama, US) — Local LLM runner; self-hosted; no data exfiltration; model supply-chain verification needed.
• PyTorch (Meta / Linux Foundation, US) — Deep learning framework; model checkpoint governance; TorchServe deployment; research-to-production lineage.
• TensorFlow / Keras (Google, US) — ML framework; model serialization risks; custom model governance; TensorFlow Extended (TFX) for MLOps.
• vLLM (UC Berkeley / vLLM Team, US) — High-throughput inference engine; open-source; self-hosted; no external data sharing.

Search, Research, Translation & Other

• Connected Papers (Connected Papers, Israel) — Visual paper graph; literature discovery; academic research; Israeli vendor.
• Consensus (Consensus, US) — Research search.
• DeepL (DeepL, Germany) — Translation; EU-hosted.
• Elicit (Elicit, US) — Research assistant AI; paper analysis; systematic review; academic integrity.
• Groq (Groq, US) — Inference acceleration.
• Lokalise AI (Lokalise, UK) — Localization AI; continuous translation; developer workflow; UK-hosted.
• Perplexity Enterprise Pro (Perplexity, US) — Enterprise search AI; internal knowledge search; data indexing; SSO; audit logs.
• Phrase (Memsource) (Phrase, Czech Republic) — Enterprise localization AI; TMS; machine translation; EU-hosted; GDPR.
• ResearchRabbit (ResearchRabbit, US) — Research discovery AI; paper recommendations; collaboration features; academic data.
• Salesforce Einstein / Agentforce (Salesforce, US) — CRM-embedded AI + agents.
• Scite (Scite, US) — Smart citation analysis; claim verification; research quality; academic trust.
• Semantic Scholar (Allen Institute for AI, US) — Academic search AI; paper summaries; citation graphs; nonprofit research focus.
• Smartcat (Smartcat, US) — Translation management AI; CAT tool; vendor marketplace; translation memory governance.
• Unbabel (Unbabel, Portugal) — AI-human translation; quality estimation; enterprise localization; EU vendor.
• Wayground (Wayground, US) — Education tooling.
• You.com Enterprise (You.com, US) — Private search AI; no tracking; enterprise deployment; data privacy focus.

Security & Identity AI

• CrowdStrike Charlotte AI (CrowdStrike, US) — Security operations AI; threat detection; autonomous response; high-privilege access.
• Darktrace (Darktrace, UK) — Self-learning AI security; anomaly detection; autonomous response; UK-hosted; GDPR relevant.
• Okta AI (Okta, US) — Identity AI; risk-based authentication; privileged access; identity threat detection.
• Palo Alto Networks Precision AI (Palo Alto Networks, US) — Network security AI; Zero Trust integration; autonomous threat response; critical infrastructure.
• SentinelOne Purple AI (SentinelOne, US) — Endpoint security AI; autonomous response; XDR platform; kill-switch capabilities.
• Zscaler AI (Zscaler, US) — Cloud security AI; SSE platform; data loss prevention; AI traffic inspection.

Slides & Presentations

• Beautiful.ai (Beautiful.ai, US) — Presentation generation.
• Decktopus (Decktopus, US) — AI presentation maker; automated design; content generation; data exposure.
• Gamma (Gamma, US) — Presentation generation.
• Pitch AI (Pitch, Germany) — Presentation software AI; collaboration; template generation; EU-hosted.
• Presentations.AI (Presentations.AI, US) — Text-to-presentation AI; automated layouts; brand templates; content governance.
• SlidesAI (SlidesAI, India) — Presentation generation.
• Tome (Tome, US) — AI storytelling; presentation generation; narrative design; creative IP.

Video Generation & Editing

• 2short.ai (2short, US) — YouTube shorts AI; clip extraction; content automation; platform dependency.
• CapCut (ByteDance, China) — Video editing; cross-border data review advised.
• Captions AI (Captions, US) — AI video editing; eye contact correction; dubbing; likeness manipulation consent.
• Colossyan (Colossyan, UK) — AI video avatars; enterprise training; consent management; UK-hosted.
• D-ID (D-ID, Israel) — Talking head AI; photo animation; likeness rights; deepfake risk; Israeli vendor.
• DaVinci Resolve AI (Blackmagic Design, Australia) — Professional video AI; color grading; facial recognition; local processing option.
• Descript (Descript, US) — Audio/video editing + voice cloning.
• Elai.io (Elai, US) — AI avatar video; text-to-video; multilingual; enterprise training; consent.
• Filmora AI (Wondershare, China) — Video editing.
• Final Cut Pro AI (Apple, US) — Mac video editing AI; on-device processing; privacy-first; Apple silicon optimization.
• Fliki (Fliki, US) — Video + voice generation.
• Hailuo AI (MiniMax) (MiniMax, China) — Video generation; cross-border data review advised; same vendor as MiniMax LLM.
• Headliner (Headliner, US) — Podcast/video promotion; audiogram generation; social media; content marketing.
• HeyGen (HeyGen, US) — AI avatars; likeness/consent risk.
• Hour One (Hour One, Israel) — AI avatar video; virtual presenters; enterprise video; likeness consent; Israeli vendor.
• iMovie AI (Apple, US) — Consumer video editing; trailer templates; on-device; Apple privacy.
• InShot AI (InShot, China) — Mobile video editing AI; social content; cross-border data review advised.
• InVideo (InVideo, India) — Video generation.
• Kling AI (Kuaishou) (Kuaishou, China) — Video generation model; cross-border data review advised; content moderation; Chinese vendor.
• Krea AI (Krea, US) — Real-time video generation; creative tool; content moderation; emerging platform.
• Loom AI (Loom, US) — Async video AI; auto-chapters; summaries; transcription; Atlassian acquisition context.
• Luma AI (Luma AI, US) — 3D/video generation.
• Lumen5 (Lumen5, Canada) — Video generation.
• Microsoft Clipchamp AI (Microsoft, US) — Video editing AI; M365 integration; auto-caption; text-to-speech; enterprise data.
• Munch (Munch, Israel) — Content repurposing AI; auto-editing; social clips; trend analysis; Israeli vendor.
• OpusClip (OpusClip, US) — Video repurposing.
• Pictory (Pictory, US) — Video generation.
• Pika Labs (Pika Labs, US) — Video generation; meme/creative focus; content policy; IP provenance.
• Premiere Pro AI (Adobe) (Adobe, US) — Professional video AI; generative extend; color match; commercial-safe training.
• Repurpose.io (Repurpose, US) — Content distribution automation; multi-platform; workflow automation; API access.
• Runway (Runway, US) — Video generation.
• Sora (OpenAI) (OpenAI, US) — Video generation; provenance/disclosure relevant.
• Splice (Splice, US) — Mobile video editing; music licensing; content creation; GoPro ownership.
• Submagic (Submagic, France) — Auto-caption AI; video subtitles; emoji/sticker automation; EU vendor.
• Synthesia (Synthesia, UK) — AI avatars; likeness/consent risk.
• Veed.io AI (Veed, UK) — Online video editing AI; auto-subtitle; text-to-speech; UK-hosted.
• Videoleap (Lightricks, Israel) — Mobile video editing AI; effects; templates; Israeli vendor.
• Vidu (Tsinghua / Shengshu) (Shengshu Technology, China) — Video generation model; academic spin-off; cross-border data review advised.
• Vizard AI (Vizard, US) — Video repurposing; auto-clipping; social media; content strategy AI.
• Wavve (Wavve, US) — Audio-to-video AI; podcast clips; waveform videos; social media content.
• Wistia (Wistia, US) — Video hosting AI; analytics; marketing video; data privacy; engagement tracking.
• Wondershare Virbo (Wondershare, China) — AI avatar video; cross-border data review advised; likeness consent; Chinese vendor.
• Zeemo (Zeemo, US) — Video captioning AI; translation; subtitle styling; content accessibility.

Voice & Audio

• Adobe Podcast AI (Adobe, US) — Audio enhancement AI; speech enhancement; microphone check; commercial-safe training claim.
• AIVA (AIVA Technologies, Luxembourg) — Classical music AI composer; copyright assignment; EU-hosted; commercial licensing.
• Altered (Altered, UK) — Professional voice editing; voice morphing; dubbing; consent management; UK-hosted.
• AssemblyAI (AssemblyAI, US) — Speech AI API; transcription; summarization; PII redaction; enterprise security.
• Deepgram (Deepgram, US) — Speech recognition API; real-time transcription; model customization; on-prem option.
• Descript Overdub (Descript, US) — Voice cloning for editing; consent recording required; deepfake risk; media integrity.
• ElevenLabs (ElevenLabs, US) — Voice cloning; likeness/consent risk.
• Krisp (Krisp, US) — Audio processing.
• Lovo (Genny) (Lovo, US) — Voice cloning and synthesis; likeness consent; commercial voiceover; synthetic media disclosure.
• Murf.ai (Murf, India) — Voice synthesis.
• Play.ht (PlayAI, US) — Voice synthesis.
• Resemble AI (Resemble AI, US) — Voice cloning; likeness/consent risk.
• Respeecher (Respeecher, Ukraine) — Voice cloning for media; entertainment focus; likeness rights; Ukrainian vendor.
• Rev AI (Rev, US) — Speech-to-text API; transcription; captioning; human + AI hybrid; data confidentiality.
• Soundraw (Soundraw, Japan) — Royalty-free AI music; commercial license; JASRAC considerations for Japan use.
• Speechmatics (Speechmatics, UK) — Speech-to-text; real-time translation; accent-agnostic; UK-hosted; GDPR.
• Suno (Suno, US) — Music generation; IP provenance relevant.
• Udio (Udio, US) — AI music generation; copyright risk; likeness in vocals; RIAA litigation context.
• Voicemod (Voicemod, Spain) — Real-time voice changing; gaming/streaming; content moderation; EU vendor.
• Whisper API (OpenAI) (OpenAI, US) — Speech recognition; transcription; translation; API data retention policy.

Writing & Editing

• Anyword (Anyword, US) — Predictive performance AI copy; marketing optimization; data-driven; performance claims.
• Clearscope (Clearscope, US) — Content optimization AI; readability scoring; competitor content analysis.
• Copy.ai (Copy.ai, US) — Marketing copy / GTM workflows.
• Frase (Frase, US) — SEO content AI; SERP analysis; competitive data scraping; search algorithm dependency.
• Grammarly (Grammarly, US) — Reads document text broadly.
• Jasper (Jasper, US) — Marketing copy.
• Jasper Campaigns (Jasper, US) — End-to-end marketing campaigns AI; brand voice; cross-channel content; governance dashboard.
• MarketMuse (MarketMuse, US) — Content strategy AI; topic modeling; site-wide content audit; competitive intelligence.
• QuillBot (Course Hero, US) — Paraphrasing.
• Rytr (Rytr, US) — Marketing copy.
• Surfer SEO (Surfer, Poland) — SEO optimization AI; content scoring; NLP analysis; EU-hosted options.
• Typeface (Typeface, US) — Enterprise content AI; brand-customized models; marketing asset generation; high decision-influence.
• Wordtune (AI21 Labs, Israel) — Rewriting.
• Writer.com (Writer, US) — Enterprise writing AI; brand governance; style guide enforcement; hallucination detection; PALMYRA models.
• WriteSonic (Writesonic, US) — Marketing copy.

Keeping the inventory alive

A tool catalog is a snapshot; an inventory is a discipline. New tools appear monthly, vendors get acquired, and embedded AI features switch on without notice, so the working practice is a quarterly review: reconcile this list against what finance is paying for, what IT sees on the network, and what teams admit to using, then record owner, data access, and approval status for each. The AI Governance Reference Library covers the frameworks that inventory feeds into.