As organizations race to adopt AI tools across their enterprise environments, regulatory compliance remains a critical concern-especially when it comes to protecting sensitive data. WitnessAI, the company behind the first enablement platform for safe AI use, has released version 2.0 of its platform with five major enhancements aimed at helping businesses meet real-world regulatory requirements like the Payment Card Industry Data Security Standard (PCI DSS).
The update introduces new PCI-specific AI activity controls, remote work observability features, and privacy-focused innovations designed to detect insider threats, assess regulatory risk, and maintain full visibility across employee AI usage-including in hybrid or travel-based work environments. Notably, WitnessAI is the first in the industry to offer a zero-install, agentless, and proxy-less solution for AI observability, setting a new standard for flexibility in compliance monitoring.
The update comes at a time when the PCI Security Standards Council has issued new guidance around integrating AI in PCI assessments, acknowledging AI’s growing footprint in payment security systems. Under PCI DSS 4.0.1, any tool that interacts with the Cardholder Data Environment (CDE) must now meet rigorous security controls-something many generative AI tools are ill-equipped to handle on their own.
“With WitnessAI 2.0, any organization subject to PCI DSS can ensure complete compliance and easy reporting of control effectiveness,” said Rick Caccia, CEO and Co-founder at WitnessAI. “Employee AI usage brings risk to the regulations companies face right now-not just future-facing ones like the EU AI Act.”
Security analysts and enterprise IT leaders agree that enforcing AI use policies across varied work environments is now mission-critical. “The new guidelines around AI use in PCI assessments will become an increasingly significant concern,” said David Neuman, Senior Analyst at TAG Infosphere. “Maintaining flexibility while having complete confidence in compliance posture isn’t just desirable-it’s a business necessity.”
That business need is exactly why fintech leader InComm Payments implemented WitnessAI. “We knew we needed a way to maintain security and compliance while encouraging our teams to leverage modern GenAI tools,” said Jonathan Kennedy, CISO at InComm Payments. “WitnessAI gives our compliance and privacy teams total visibility and confidence. We’re reducing risk while maximizing productivity.”
With its latest update, WitnessAI is positioning itself at the forefront of secure AI adoption in regulated industries. Its 2.0 platform supports the evolving needs of compliance teams, from preventing data loss to enabling executive privacy in AI assistants like Microsoft Copilot. The company’s recognition as a finalist in the 2025 SC Awards for Best Compliance Solution further highlights its growing impact in the enterprise AI landscape.
WitnessAI’s platform is already deployed globally, enabling security and privacy teams to detect shadow AI, control risky behavior, and meet audit demands with confidence. For organizations looking to strike the balance between innovation and compliance, WitnessAI offers a scalable path forward.
