Monitor your AI and security compliance 24/7.
Meru keeps you audit-ready for ISO 42001, AIUC-1, SOC 2 and ISO 27001, and keeps the proof ready for every enterprise buyer, so the next security review takes days, not months.
Kailash gets you trusted. Meru keeps you trusted.
Limited to the first 100 companies · 50% off your first year
Share it with a buyer through a private link. Design partner preview, sample data.
What Meru does for you
Always checking, so you are always ready
Watches 24/7
Meru checks your cloud, code and identity tools around the clock and flags drift the day it happens, not the week before an audit.
Maps your AI posture
See the AI models, vendors and agents you use, what data they touch, and how each one lines up with ISO 42001 and AIUC-1.
One control, every framework
Check a control once and get credit everywhere it applies. Your SOC 2 work also counts toward ISO 27001, ISO 42001 and AIUC-1.
Proof a buyer can check
Design partners firstShare a live Trust Report instead of last year's PDF, so the buyer's security team sees where you stand today.
How it works: three steps, then it runs on its own
Connect
Hook up your cloud, code and identity tools so evidence comes in on its own.
Check
Meru runs checks around the clock and shows what is passing, failing and still to do.
Prove
Hand the auditor and the buyer's security team current evidence, not old screenshots.
Buyers now ask AI companies
- Is our data used to train your models?
- Which model providers do you use?
- Are you ISO 42001 certified?
- How do you stop prompt injection?
- Where does our data live?
- Who reviews what your AI agents do?
Meru keeps the answer, and the evidence behind it, ready before they ask.
Check once, credit everywhere
One control. Every framework it satisfies.
Most teams prove the same thing more than once, for example once for SOC 2 and again for ISO 27001. Meru's common-controls library maps one control to every requirement it covers, so a single passing check counts for all of them.
The mapping was built by working auditors, then compared against other published mappings.
Example. Press the button.
Counts toward
Try it yourself
Click through a sample company.
A made-up company with made-up data. Fix an issue, sign something off, and watch the results update across frameworks.
What Meru covers
Frameworks, from the first audit to the next
Live today
SOC 2
LiveControls, evidence and policies kept audit-ready between audits.
ISO 27001
LiveReuse your SOC 2 work and see only what is actually new.
ISO 42001
LiveYour AI management system: AI inventory, impact assessments and AI controls.
AIUC-1
LiveThe AI agent standard enterprise buyers are starting to ask for.
In development with design partners 6
Meru Trust Report
In developmentA live, shareable view of your AI and security posture for buyers.
EU AI Act
In developmentWhich obligations apply to your AI, and the proof for each one.
AI sovereignty
In developmentShow where your data and models run, and who can reach them.
Shadow AI discovery
In developmentFind the AI tools your team uses that nobody signed off on.
AI vendor tracking
In developmentEvery model provider and AI vendor, with the data they can see.
NIST AI RMF
In developmentMap your AI risk work to the framework US buyers reference most.
Need another framework or tool? Talk to a Kailash advisor.
Design partner program
Help shape Meru. Get it first.
We are opening Meru to the first 100 AI and SaaS companies selling to enterprise. Join the waitlist and we will reach out to see if it is a fit.
- 50% off your first yearFounding price, only for the first 100 companies.
- Hands-on setupA Kailash Lead Auditor connects your tools and sets up your controls with you.
- First accessThe Trust Report, EU AI Act and AI sovereignty modules before anyone else.
- A direct line to the foundersTell us what your buyers ask. We build it.
What we ask in return: short feedback calls while we build, and honest notes on what works.
No spam. We only use this to contact you about Meru.
Questions
Good questions, short answers
Is Meru a certification?
No. Meru helps you prepare and keeps a clean, current record. A certification or report still comes from an accredited body or an independent auditor.
Who is Meru for?
AI and SaaS companies selling to enterprise buyers, especially teams facing security and AI reviews from ISO 42001 and AIUC-1 to SOC 2 and ISO 27001.
What does it cost?
Design partners get 50% off their first year, limited to the first 100 companies. Join the waitlist and we will share pricing when we reach out.
Do I need Kailash to use Meru?
No. Meru works on its own. If you want an auditor to set it up with you or sit in the room for your audit, Kailash can do that.
Who do I talk to with questions or concerns?
A Kailash advisor. Use the waitlist form above, or reach out through the Kailash site.