Your team is using ChatGPT with confidential data. You need to see it, control it, and prove you govern it.
SoberanIA is the SaaS AI governance platform designed for companies in Colombia and LATAM. Model inventory, Shadow AI control, impact assessments, and digital policy signatures — ready for ISO 42001 and EU AI Act.
Not a compliance checklist. An architecture.
E governs. M executes. C oversees. S enables.
The highest functional density sits at E ∩ C — the GRC core — confirming that SoberanIA is built for AI governance, regulatory compliance, and institutional auditing.
Not to document. To operate.
Three signals your company needs AI governance today
Investors and auditors ask about AI governance
Investment funds and audit firms already include AI governance in their due diligence. Without a formal framework, your company loses credibility.
Enterprise clients require ISO 42001 in RFPs
Large enterprises are including ISO 42001 as a requirement in their procurement processes. Without certification, you are left out.
Shadow AI is already happening in your organization
Your teams are already using ChatGPT, Copilot, and other AI tools with corporate data. Without visibility or control, risk grows every day.
From zero to operational governance in 4 steps
Inventory
Register all AI systems in use — including ChatGPT and generative AI tools.
Risks
Assess the impact and risk of each system using ISO 42001 methodology.
Policies
Define and digitally sign your organization's AI governance policies.
Compliance Dashboard
Monitor ISO 42001 compliance progress in real time with executive reports.
What no other platform does
SoberanIA includes features that replace tools your company already pays for separately.
External Auditor Portal
Invite your ISO auditor with a unique, time-limited link. Configure their access window, set entry and expiration dates, and the auditor accesses directly in read-only mode. No internal credentials shared. No team intervention needed. Access automatically revoked when the audit ends.
Included from Professional planAI-Generated Committee Minutes with Digital Signature
Your AI governance committee finishes the session and the minutes are already drafted. AI generates the formal draft in under 30 seconds. You edit, approve, and DocuSign notifies signatories automatically. Minutes digitally signed and archived with full traceability — without leaving the platform.
Replaces: Word + DocuSign + manual managementShadow AI Control via WhatsApp
Your team already uses WhatsApp for work. SoberanIA gives you a secure corporate channel where authorized users query AI policies, approve documents, and escalate risks directly from WhatsApp. With anomaly detection, plan quotas, and OTP verification. Private AI on Amazon Bedrock — your data never leaves to public APIs.
Unique in the marketHow much is your company spending on OpenAI and Anthropic?
SoberanIA syncs real token consumption from each provider's official API. See spending by user, module, and day. Internal platform usage dashboard plus real data from your provider account. No spreadsheets, no surprises at month-end billing.
For CTOs who want real controlTraining with ISO 42001 compliance certificates
Create AI governance training programs with integrated course player, inline quizzes, and a verifiable certificate with unique code. Every employee who completes a module generates automatic compliance evidence linked to the corresponding ISO 42001 controls. Ready for any auditor.
Training evidence ready for auditorsGovernance for every sector
AI risk looks different by industry — SoberanIA covers them all
Banking & Fintech
High risk: credit scoring, fraud detection, KYC
- Document credit model explainability for regulatory audits
- Bias testing on loan approval algorithms
- Vendor governance for scoring model providers
Insurance
High risk: actuarial pricing, claims review, fraud
- Audit trail for actuarial models for regulators
- Fair pricing documentation (no discriminatory factors)
- AI claims decisions — explainable and reversible
Private Healthcare
High risk: assisted diagnosis, triage, resource allocation
- Impact assessment for diagnostic models
- Traceability of AI-assisted clinical decisions
- Governance of sensitive patient data
HR & Recruiting
High risk: AI hiring, performance scoring
- Bias assessment in CV screening tools
- Explainability documentation for hiring decisions
- Employee notification of AI use in HR processes
Retail & E-commerce
Medium risk: dynamic pricing, recommendations, forecasting
- Price discrimination documentation
- Recommendation algorithm transparency
- ChatGPT usage policy for marketing teams
Each module maps to a specific ISO 42001 clause
6 key modules with visual evidence — not vaporware
AI Policy with Digital Signature
Markdown editor with multi-signer digital signature, version control, approval workflow, and full traceability — who signed, when, from where.
AI System Inventory
Inventory with technical metadata, risk level (low/medium/high), compliance status, lifecycle stage, and decision traceability per system. Includes ChatGPT and generative AI.
Algorithmic Impact Assessment
Structured AIIA across 5 dimensions: fairness, privacy, safety, transparency, and autonomy — with weighted scoring and automatic recommendations. Audit-ready output.
AI Incident Management
Full lifecycle: registration with categorization (bias, data leak, model failure, misuse), responsible assignment, escalation, root cause analysis, and lessons learned.
Compliance Tracking
Real-time progress per ISO 42001 control with evidence uploads, action plans, and executive dashboard. One-click exportable compliance report to PDF.
Prompt Library
Centralized corporate prompt library: approved prompts by role, data classification rules, prohibited model list, and usage analytics. The control layer for ChatGPT, Copilot, Gemini, and Claude.
Normative coverage — 6 key areas
Each clause mapped to a SoberanIA module
First international standard for AI Management Systems
NIST AI Risk Management Framework
Regulation 2024/1689 — Risk-based classification
| ISO Clause | Area | Business Risk | SoberanIA Module | Status |
|---|---|---|---|---|
| §5.2 | AI Policy | No accountability when AI fails | Policy + Digital Signature | ✓ |
| §8.2 | AI System Inventory | Shadow AI, undocumented models | AI System Inventory | ✓ |
| §6.1.2 | Algorithmic Impact Assessment | Discriminatory decisions, lawsuits | Impact Assessments | ✓ |
| §8.7 | Incident Management | Undetected bias, regulatory exposure | Incident Management | ✓ |
| §9.1 | Compliance Tracking | Invisible compliance drift | Compliance Tracking | ✓ |
| §8.5 | Generative AI Control | Shadow AI, IP leaks, hallucinations | Prompt Library | ✓ |
Connect the AI your teams already use
Centralize control of ChatGPT, Copilot, Claude, and Gemini from SoberanIA. With your own API keys, corporate SSO, and legal electronic signatures.
GPT-4o and o1 with your API key. FinOps: cost by area, user, and project. Configurable spending limits.
Claude Sonnet and Opus with your API key. Ideal for contract, policy, and legal document analysis.
Gemini 2.5 Flash — best cost-performance ratio. Available with your API key or as a platform option.
Grok with your xAI API key. Coming soon.
Azure OpenAI Service with your Azure subscription. GPT-4 models and embeddings in your private tenant.
Login with corporate Google account. Automatic user provisioning (JIT) with configurable default role.
Authentication with Microsoft Entra ID / Azure AD. Compatible with Microsoft 365 and hybrid environments.
Advanced electronic signature for contracts, policies, and AI agreements. Sequential or parallel flow with real-time webhook.
Governance alerts, incidents, and policy expiration in your Slack channels.
Sync AI contracts and use cases with your corporate CRM.
Electronic signature with Adobe Acrobat Sign for corporate PDF documents.
Sales pipeline management integrated with your HubSpot CRM.
Integration Hub Enterprise
Connect ChatGPT, Copilot, Claude, and Gemini with your own API keys, enable login with your corporate directory (Google Workspace or Microsoft 365), and send documents for electronic signature with DocuSign — all from the same AI governance panel.
LLM FinOps
AI spending visibility by area, user, and project. Soft monthly limits per provider and alerts when approaching the cap.
Corporate SSO
Login with Google Workspace or Microsoft 365 account. Automatic provisioning (JIT) and roles mapped to your company directory.
DocuSign Electronic Signature
Send policies, contracts, and governance documents for signature directly from the platform. Real-time webhook and full traceability.
Plans for every governance stage
Platform + Implementation — choose the right plan for your company
For CTOs and Compliance teams
MVG
- ✅ Signed AI policy
- ✅ 1 governed AI system
- ✅ 35-control ISO 42001 baseline
- ✅ Critical system AIIA
- ✅ Governance committee activated
- ✅ Initial team training
- ✅ 90 days platform included
- ✅ Guarantee: 60% compliance or 50% refunded
* For companies with existing governance, implementation cost is quoted based on your current governance state, documented AI systems, and registered risks. → Request a custom quote
Companies with basic governance, need platform
Growth
- ✅ Full platform access (15 modules)
- ✅ ISO 42001 compliance dashboard
- ✅ Prompt Library
- ✅ Incident management
- ✅ Email support
Large companies on the path to ISO 42001 certification
Professional
- ✅ Everything in Growth
- ✅ Dedicated consultant 6 months (~120 hours)
- ✅ Role-based team training
- ✅ ISO 42001 audit preparation
- ✅ Expert-validated templates
- ✅ Week-by-week implementation plan
Multinationals, corporate groups
Enterprise
- ✅ Everything in Professional
- ✅ Unlimited users and AI systems
- ✅ API integrations (ERP, GRC, SIEM)
- ✅ SLA + dedicated account manager
- ✅ 12-month post-implementation support
- ✅ External ISO 42001 auditor included
Founding Member — only 10 spots until June 2026: 90 days platform at no cost + 30% discount on MVG consulting during the first year. In exchange: logo on homepage, shared case study at 90 days, 1 callable reference per quarter.
Founding Members Program
Be part of SoberanIA's founding group
Deadline: June 30, 2026
What you receive
- ✅ 90 days platform at no cost
- ✅ Consulting discount
- ✅ Access to product roadmap
- ✅ Direct line to the founder
- ✅ Monthly virtual advisory board
What we ask in return
- 🤝 Logo on SoberanIA homepage
- 🤝 Shared case study at 90 days
- 🤝 1 callable reference per quarter
- 🤝 Monthly product feedback
Apply to the program
The founder
Juan David Vallejo Robayo
I've spent over 15 years building technology and seeing the same pattern repeat: organizations adopt faster than they structure. Today that challenge is called AI. I built SoberanIA so that AI can stop being an experiment and operate with traceability, control, and accountability.
View on LinkedIn →Frequently Asked Questions
Everything you need to know before getting started
Have more questions? Talk directly with our team.
AI Governance Assessment — Free
22 questions, 5 minutes — discover your company's real exposure to AI risk
Governance shouldn't live in documents.
SoberanIA turns it into an operating layer.
Start with the platform — operational governance in 48 hours. Add guided implementation when you need it.