Solcis launches Compliance Studio: an open compliance layer that checks every AI agent action against policy

• Who: Solcis, a Singapore-based spin-out of 6clicks, via a Media OutReach Newswire announcement on October 21, 2026.
• What: Compliance Studio and the Solcis Policy Engine — an open compliance layer for AI agents, built to be self-hosted.
• What it does: turns policies and compliance obligations into enforceable rules, checks every agent action against them as it happens, and keeps a tamper-evident record for auditors and regulators.
• Integrations: plugs into open runtime enforcement engines — NVIDIA OpenShell and Microsoft’s Agent Governance Toolkit (AGT).
• Six capabilities: policy lifecycle and authoring, a universal evidence ledger, compliance model management (recommends the best small language model for each policy), learning and drift detection, plus compliance coverage and analytics with agent discovery.
• Domains covered: cybersecurity, privacy, financial crime, conduct, and prudential regulation.

Every AI agent action should meet the same obligations as the rest of the business — but for most companies, that's still nearly impossible to prove. On Wednesday, Singapore-based Solcis released Solcis Compliance Studio and the Solcis Policy Engine, an open compliance layer that turns policies and compliance obligations into enforceable rules, checks each action an AI agent takes against those rules as it happens, and keeps a tamper-evident record for auditors and regulators.

The missing layer between guardrails and the auditor

The industry already has open security guardrails for agents — NVIDIA's OpenShell and Microsoft's Agent Governance Toolkit (AGT) among them. Solcis positions itself one layer up: it extends those guardrails with the controls compliance professionals actually need. Instead of proving that a query could be safe, Compliance Studio is where compliance teams define, run, and prove compliance for their agents — and the platform is built to be self-hosted, so regulated organizations never have to send their policies or audit data to someone else's cloud.

Six capabilities, one evidence ledger

The studio has six core capabilities, per the announcement. Policy lifecycle and authoring turns obligations into enforcement policies and manages them through deployment and updates. A universal evidence ledger pulls results from every enforcement point into one tamper-evident record — the piece auditors will care about most. Compliance model management recommends the best small language model for each policy, benchmarked for compliance, a nod to the cost and control advantages of small models. Learning and drift detection improves policies over time from observed decisions and human judgment, and flags control and agent drift. Finally, compliance coverage and analytics delivers audit-ready reporting on compliance posture, including agent discovery — finding the agents running in your estate in the first place.

Where it fits: cybersecurity to prudential regulation

Solcis is aiming squarely at regulated industries: the platform covers cybersecurity, privacy, financial crime, conduct, and prudential regulation. As agentic systems move from pilots into production — booking, trading, triaging, provisioning — regulators are already asking the question Compliance Studio is built to answer: show me that every automated action met the rules, and show me the receipt. Solcis is a spin-out of 6clicks, the Singapore governance, risk, and compliance software company, so the compliance-domain DNA is baked in from the start.

The real test will be adoption: whether compliance teams — not just AI engineers — pick up the studio, and whether its evidence ledger survives a real audit. But the framing is right for where the agentic era is heading. Generating a query was the easy part; proving every one of them was compliant is the work that actually unlocks production. Solcis just announced it wants to own that layer.