AI does the tedious sorting. People make the expert calls.
Automatic evidence classification, an AI assistant and AI dashboards. Every AI call passes through data masking and safety checks, and you choose the model provider.
The problem
The slowest part of audit prep isn't judgment — it's sorting: hundreds of screenshots, reports and procedures, each matched to a control. Hand that to AI and keep people for the final check.
01
AI evidence classification
Drop in hundreds of files; AI tells you where each one belongs
Upload a batch of evidence (PDF, images, Word, Excel, PowerPoint). AI reads the content, decides which assessment objective it belongs to and gives a confidence score. On the "confirm" page you approve or reassign each item; confirmed items file into their tasks.
- Image text recognition — screenshots classify too
- Low-confidence items come first; high-confidence items can be approved in bulk
- Classification reports: hit rate, reassignment rate — it gets better with use
02
AI assistant
Bottom-right of every page, ready to ask
Answers how-to questions ("How do I assign a task?") and compliance questions ("What evidence does ISO 27001 A.8.15 need?"), using the context of the project and page you're on.
03
AI dashboards
Generate a chart from one sentence
"List findings per department this cycle." "Compare last year's completion rate to this year's." Type a sentence; AI builds the chart and explains the data source. Save it as a fixed dashboard.
04
AI gateway: every call under control
Data masking, injection defense, quota management
All AI features go through a built-in gateway that masks personal data and sensitive strings before sending, checks for prompt injection, logs every call and tracks quota. You configure the model provider (OpenAI, Anthropic, Google, Azure or a self-hosted model) and keep the keys.