Asenion Policy Packs now on sale for SAS AI Navigator compliance

What Asenion is offering

According to Asenion, the Policy Packs extend the ability of organizations to apply structured compliance requirements across their AI portfolios. The company, based in Kitchener, Ontario, describes itself as focused on turning complex requirements into operational controls.

The release builds on a partnership between SAS and Asenion, formerly Fairly AI, that began in 2022. That work initially centered on AI assurance capabilities for SAS Viya, including bias and fairness assessments. Asenion says the relationship now moves from assurance of individual AI systems to the broader question of how to turn the requirements that apply to an organization into controls that can govern AI in operation.

SAS AI Navigator, according to the release, provides a centralized, vendor-agnostic view of AI models, agents and use cases, while helping organizations align AI use with government regulations and internal policies. The Policy Packs add structured compliance content to that environment.

Beyond the EU AI Act and NIST

Asenion argues that AI compliance is wider than AI regulation. Organizations are often told to comply with the EU AI Act, align with NIST AI RMF or implement ISO/IEC 42001, but the company says these cover only a fraction of what can apply to an AI system. Its list of possible sources includes:

• laws, regulations and regulatory mandates
• international and national standards, and industry frameworks
• contractual and customer requirements
• model risk and information security requirements
• privacy, data protection and human resources policies
• responsible AI, organizational risk and bespoke internal policies

The Policy Packs are meant to bring these together and connect them through a chain the company describes as requirement, context, intent, control objective, control, verification and evidence. Asenion says the same approach can be applied whether the system is a predictive model, a generative AI application, an AI agent, a customer chatbot or an employee-facing copilot.

ControlGen and the AI Control System

Asenion ControlGen is the engine behind the packs. It converts the language of regulations, standards, frameworks and organizational policies into structured controls, which are packaged as Policy Packs and applied to AI use cases through SAS AI Navigator. Asenion says this means organizations are not limited to a predefined library of AI regulations and can translate their own bespoke internal policies as well.

CEO David Van Bruwaene framed the problem as one of language. "AI compliance cannot be solved by simply collecting more documents," he said. He added that the real challenge is translating what a regulation, standard or internal policy requires into controls for the AI systems an organization actually operates.

Allie DeLonay, Senior Product Manager for SAS AI Navigator, said organizations need more than visibility into where AI is used. According to her, Policy Packs let them bring structured compliance requirements into the same environment where they manage their AI inventory, policies and use cases.

The packs are part of the Asenion AI Control System, which the company says spans policy and control management, AI assessment, verification and assurance. That suite is available through AWS Marketplace and Microsoft Marketplace.

What it means for organizations

For companies already using SAS AI Navigator to track AI models, agents and use cases, the release adds a way to attach compliance requirements to those same use cases, including requirements that are specific to the business. The source does not give pricing or details on which regulations are covered by ready-made packs, so buyers would need to ask the vendors for specifics.

Asenion also says it sees people and machines dividing the work: people define requirements, interpret context, make decisions and remain accountable, while machines translate, map, verify, monitor and generate evidence at a scale humans cannot.