Autumn8

Runs on api, Web.

Autumn8 is ranked #22 of 37 in governance, risk and compliance software on The Geeks Club. It runs on API, Web.

Autumn8 plans and pricing

Custom pricing Pricing by demo/quote; no public plan prices stated autumn8.ai · 8 Oct 2026

Policy management: Yes
Evidence collection: Yes
Supported frameworks: SOC 2, ISO 27001, HIPAA, GDPR, NIST 800-53, FedRAMP, EU AI Act, CSA CAIQ, PCI DSS, custom frameworks
Automated evidence: Yes
API access: Yes

CISO Assistant Lesson 17.8 SimpleRisk Lesson 27.8 Eramba Lesson 37.2 OpenGRC Lesson 47.0 Apptega Lesson 56.8 VComply Lesson 66.8

Product: Autumn8 describes itself as agent-native compliance infrastructure that automates compliance work and governs deployed AI agents.
SOC 2 readiness: It offers SOC 2 Type 1 and Type 2 readiness with fractional CISO leadership and continuous compliance automation.
Automation: Autumn8 says it automates over 75% of the manual readiness workload.
Frameworks: The site lists SOC 2, ISO 27001, HIPAA, GDPR, NIST 800-53, FedRAMP, EU AI Act, CSA CAIQ, PCI DSS, and custom frameworks.
AI advisor: The vCISO answers control, policy, and questionnaire questions with citations and flags readiness drift.
Agent governance: AAMP authorizes and monitors autonomous actions per transaction and keeps an immutable audit trail.
Integrations: The homepage names MCP, Claude, OpenAI, and Gemini as part of its integrated systems.
Security: The site describes its Compliance RAG as multi-tenant and encrypted.
Outputs: Autumn8 generates reports, remediation plans, and questionnaire answers with confidence scores and citation-linked evidence.
Support model: The service is expert-led, with a fractional CISO owning strategy, evidence quality, and auditor conversations.
Intended customers: The SOC 2 service is aimed at cloud-native SaaS companies, especially seed to Series B businesses and small security teams.

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.