
New application gives risk teams a structured way to assess and monitor third-party AI use, grounded in the NIST AI Risk Management Framework
SAN FRANCISCO, Oct. 21, 2026 /PRNewswire/ -- Aravo, a provider of third-party risk management and resilience solutions, today announced Aravo for Responsible AI, a risk application that helps organizations assess and monitor how their vendors and other third parties develop, deploy, and govern artificial intelligence. Built around the NIST AI Risk Management Framework (AI RMF), the application brings AI-related due diligence into the workflows and oversight of an organization's broader third-party risk program.
As AI becomes part of more products and services across third-party ecosystems, organizations face questions about data integrity, privacy, security, bias, transparency, and oversight. These concerns continue to evolve as AI capabilities and expectations change. Risk teams need a consistent way to understand how a third party uses AI, evaluate the controls in place, and direct follow-up where human review is needed.
Aravo for Responsible AI provides a structured assessment that can be tailored to a third party's AI use cases and operating context. Teams can evaluate governance practices, oversight, testing, security, and monitoring; assess inherent risk and control effectiveness; route findings through existing decision and remediation workflows; and track changes through ongoing monitoring, renewals, dashboards, and reporting. The application supports expert judgment throughout the process, helping teams focus attention where it is most needed.
"AI risk is becoming a critical part of third-party risk programs, and the expectations for managing it will continue to change," said Dean Alms, chief product officer at Aravo. "Aravo for Responsible AI gives teams a practical, structured way to assess how third parties use AI and the safeguards they have in place, while keeping the work connected to the governance and workflows of their wider program."
Aravo for Responsible AI is the first of many Aravo applications to be developed using Aravo's new AI Configurator. The AI Configurator is an enterprise-grade engineering tool that enables rapid development of risk-domain applications. It also gives Aravo greater agility and adaptability throughout the application journey, from implementation through ongoing maintenance. As regulations, AI technology, and security and privacy concerns change, Aravo can update the application to help organizations keep the risk domain current and reduce exposure.
Aravo for Responsible AI is part of the Intelligence First™ Platform's Secure and Stable IT risk portfolio, alongside applications for areas such as information security and digital resilience. It builds on Aravo's established due diligence approach and the same platform organizations use to manage more than 50 third-party risk domains. This gives teams a connected view of risk, supports accountability across stakeholders, and helps reduce fragmentation as programs expand.
Learn more about Aravo for Responsible AI, and register for Aravo's webinar, "Harness AI to Protect Your Business with More Agile TPRM," on October 27 at 3:00 p.m. EDT or October 28 at 3:00 p.m. GMT
About Aravo
Aravo provides third-party risk management (TPRM) software that helps enterprises manage complex third-party ecosystems with confidence. Its Intelligence First™ Platform combines AI, automation, and risk intelligence to streamline assessments, improve decision-making, and strengthen resilience across suppliers, vendors, partners, and other external relationships.
Used by over 9 million third-party users and 800,000 corporate users in more than 190 countries, Aravo helps organizations reduce risk, meet regulatory requirements, and manage complex third-party relationships at scale.
SOURCE Aravo Solutions, Inc. / Corporate Ink
Share this article