Solcis, a spin-out of 6clicks, released Solcis Compliance Studio and the Solcis Policy Engine. According to the announcement, the two products together let organisations turn their policies and compliance obligations into enforceable rules for AI, check each action an AI agent takes against those rules as it happens, and keep a tamper-evident record for auditors and regulators. Solcis integrates with open runtime enforcement engines such as NVIDIA OpenShell and Microsoft's Agent Governance Toolkit (AGT). The company said organisations putting AI agents to work must show that every automated action meets the same obligations as the rest of the business, and that this is currently hard to prove. Solcis said it closes that gap across cybersecurity, privacy, financial crime, conduct and prudential regulation.
Solcis Compliance Studio is described as the place where compliance teams define, run and prove compliance for their AI agents. It has six core capabilities: policy lifecycle and authoring, which turns obligations into enforcement policies and manages them through deployment and updates; a universal evidence ledger that brings results from every enforcement point into one tamper-evident record; compliance model management, which recommends the best small language model (SLM) for each policy, benchmarked for compliance; learning and drift detection, which improves policies over time from observed decisions and human judgement and detects control and agent drift; compliance coverage and analytics, providing audit-ready reporting on compliance posture including agent discovery; and integrations with GRC, SIEM and ticketing systems, including 6clicks, ServiceNow IRM and Archer.
Organisations can enforce Studio policies through NVIDIA OpenShell, Microsoft's AGT, or the Solcis Policy Engine, described as Solcis's own open enforcement engine for general compliance and business rules. The Policy Engine reaches decisions in under 200 milliseconds by combining two types of check: deterministic checks that apply fixed rules returning the same result for the same input every time, and inference-based checks that use AI to judge context and ambiguous cases fixed rules cannot capture. Checks are routed to the best-suited AI small language model, and every agent action in its path receives an Allow, Deny or Escalate decision with a severity rating, inline and without slowing it down. Decisions are enforced through the Solcis SDK in an AI system's action path, or the Solcis Gateway on model, tool and MCP endpoints.
"Most organisations know what the regulation says and what their systems do, but not how the two connect," said Anthony Stevens, CEO and co-founder of Solcis. "The Solcis platform joins them up, from obligation to policy to enforcement to evidence. And for the organisations that need it most, keeping that chain on their own infrastructure isn't a preference, it's non-negotiable." Solcis said it is built only to be self-hosted, so organisations keep full control of their AI compliance workloads, models and data, and that nothing it processes, from policies to decision logs, ever leaves their environment. Both products are available now directly from Solcis and through partners, and from November 2026 on the Microsoft, AWS, Google Cloud, Oracle, NVIDIA and Red Hat marketplaces. Compliance Studio is sold on a subscription or perpetual licence with no usage metering, and the Policy Engine is released under the Functional Source License, so its code is open to audit.