Cranium is an AI security and governance platform built around a continuous five-step cycle. It discovers AI models, agents, datasets and vendors, including an AI Bill of Materials and shadow-AI detection. It observes the behaviour of models and agents with risk signals and cost tracking, defines and enforces AI policy mapped to the NIST AI RMF and the EU AI Act, and runs adversarial testing, red-teaming and runtime threat defence. It also produces AI Cards and Trust Hubs for audit purposes. Cranium offers a web application with customer login, a public API and demos on request.
Cranium is a US company; its contact page lists Short Hills, New Jersey as its only office and headquarters. The platform is not open source. The website does not state how the service is technically delivered (SaaS or on-premises) or in which regions customer data is hosted. A European organisation should have the hosting location and the applicable US jurisdiction confirmed in writing before use.