The situation
The obligations are real and mostly known. What is missing is the evidence that each one was met, in a place someone can point at, on the day it is asked for. So compliance becomes a fortnight of chasing colleagues for screenshots and attachments that existed all along.
The harder version is the question after the fact: who decided this, on what basis, and what did they know at the time. That answer is usually reconstructed from memory, because nothing wrote it down while it was happening.
What it reads
Your own drives and mailboxes, at the scope your administrator granted. We do not become a second copy of the evidence store.
Four jobs, continuously
None of these is a report you run. They are standing work, done as the material arrives, so the audit pack is a consequence rather than a project.
Map obligations to owners
Every duty pulled out of a policy or a contract becomes a line with a named person against it, the clause it came from, and the date it is next due.
Gather the evidence
Files the document, the approval, the dated record that shows the duty was met, against the obligation it belongs to. Gaps are listed as gaps, not quietly left blank.
Chase the attestations
Drafts the request to the owner, tracks who has responded, and escalates the ones ageing past their date. The chasing is the job nobody wants; it is not judgement.
Answer the request
Assembles the response to a due-diligence questionnaire or an evidence request, each answer citing the document behind it, and says plainly where you have nothing.
It does not attest on your behalf
A statement to a regulator, an auditor or a customer is a statement by a person. Nothing is submitted, signed, certified or notified autonomously, at any trust level. An AI employee assembles the answer and the evidence; a named human says it is true.
Materiality is the same. Whether something is a breach, whether it is reportable, and when the clock started are judgements we will not take from you, and an AI employee that thinks it might be one raises it rather than deciding.
The five levels and their floors →Map the obligation, gather evidence, draft the answer, chase the owner, flag the gap, prepare the pack.
Attest, certify, submit a filing, notify a regulator, or decide that something is or is not a breach.
An evidence request, answered
What stays with the compliance team
Every statement of fact
To a regulator, an auditor, a customer or the board. Drafting is work; asserting is accountability, and the two do not move together.
Risk appetite and materiality
What counts as significant, what is tolerated, what escalates to the board. An AI employee applies the line you set; it does not move it.
The awkward conversations
Telling a function it is out of policy, and deciding what happens next. The evidence arrives prepared; the conversation is still yours.
Bring the questionnaire you are halfway through. That is a good two weeks.
Get a Demo→