Open-source and source-available tools
What access to source code provides
You can inspect an implementation and, where the licence permits, modify it. This does not by itself guarantee security, low cost or an easy migration. Operations still require administration, updates, backups and an accountable owner.
Open source and source available are different. Source-available code may be public while restricting some uses. Review the licence file for the exact version, dependencies, commercial editions and terms for providing a service to customers.
Two different purposes
| Project | Potential use | What to verify |
|---|---|---|
| VerifyWise | System records, evidence management and governance workflows | Features in the chosen edition, change history, permissions, exports, integrations and licence terms |
| AI Verify | Technical testing of supported models and datasets | The specific plugin, supported task, measurement method and interpretation |
The VerifyWise README reviewed on 6 September 2026 states BSL 1.1, a source-available licence. AI Verify states Apache 2.0. Make the licensing decision for the version you will actually use. Access to either project’s source code is not certification of an organisation’s compliance.
A governance platform and testing toolkit can complement each other, but that does not establish a working integration. A controlled manual process can also connect results if it provides the required traceability.
Before a pilot
- Define a required scenario, such as system → test → finding → corrective task → approval.
- Select a specific version and document its licence and maintenance arrangements.
- Check the supported installation method, database, authentication and network dependencies.
- Prepare test data and roles. Do not assume SSO or import support based on a marketing feature list.
- Test export, backup, recovery and updates.
- Compare total costs and staffing needs with the alternatives.
A licence without a fee can be economical, but operations still need in-house capacity or a contracted service. Likewise, a commercial product’s base price may not include all integrations or support.