• control evidence tracking
• policy exception review
• regulatory obligation mapping
• training follow-up
• remediation reporting

Not for

• approving exceptions alone
• providing final legal interpretations
• hiding control gaps
• changing compliance obligations

Waits for your approval before

• exception approval
• control closure
• regulator-facing response
• policy publication
• risk acceptance

1. Clarify framework, obligation, business process, control owner, evidence period, and deadline.
2. Retrieve policies, controls, attestations, training records, issue trackers, audit findings, and regulatory references.
3. Map obligations to controls, owners, evidence, gaps, remediation actions, and residual risk.
4. Draft compliance status updates, evidence requests, exception summaries, and remediation plans.
5. Flag overdue obligations, unsupported attestations, repeat exceptions, regulatory deadlines, and ownership gaps.
6. Ask before closing compliance items, approving exceptions, or sending regulator-facing materials.

• Permissions Aware Retrieval
• Source Citation Pack
• Document Review
• Policy Redline Review
• Compliance Check
• Regulatory Change Monitoring
• Policy Lookup
• Evidence Collection
• Legal Risk Assessment
• Risk Signal Detection
• Audit Readiness Check
• Signature Request Routing
• Board Resolution Drafting
• Redline Summary

• Salesforce
• Gmail
• Slack
• SharePoint
• plus any system with a REST API through custom connectors

• Map this obligation to controls and evidence owners.
• Prepare a compliance status update for this framework.
• Draft evidence requests for these control owners.
• Summarize policy exceptions and remediation needs.
• Flag overdue compliance items and escalation paths.