Skip to main content

VEYZL: AI governance merge checks for GitHub pull requests

VEYZL is a GitHub merge check for AI work. It runs your policy on the pull request, can stop the merge if it fails, and keeps a signed record of the audit.

What VEYZL does

Most AI governance tools watch models after they ship. VEYZL enforces governance before the code merges. On each pull request it analyzes what your AI system actually does, selects only the compliance controls those capabilities trigger, runs targeted tests against the live model or endpoint, and blocks the merge when a gated check does not pass.

Every finding is cited to the regulation it implicates, including the EU AI Act, the NIST AI Risk Management Framework, ISO/IEC 42001, the Equal Credit Opportunity Act, and the Fair Housing Act. Results that cannot be verified are reported as inconclusive instead of passing silently.

How it works

  1. Install the VEYZL GitHub App and create a project for the repository that contains your AI system.
  2. Review the detected system profile: the AI surfaces VEYZL found and the controls they trigger.
  3. Open a pull request. VEYZL runs dataset, API, or hybrid audits and posts a VEYZL Audit status check.
  4. Make the check required in branch protection so a failing audit stops the merge.
  5. Export signed audit evidence for security, risk, and regulator review.

For production traffic, the live audit SDK wraps the OpenAI, Anthropic, and Google GenAI clients and records prompts and responses without blocking your calls.

Plans

  • Free ($0 / month): 1 AI system, unlimited runs on every push and pull request, findings and fix guidance on the pull request, 30 days of evidence history. Advisory only: merges are not blocked.
  • Startup ($5 / month): up to 3 AI systems, blocking merge checks, signed evidence exports with independent verification, custom thresholds, policy versioning, and 1-year evidence retention.

Learn more