Checks your current position against mandatory documents and deadlines and delivers the to-do list.
Developed in Germany · Hosted in the EU or on-premises
Delivered together with
Sovereign hosting in Germany, single-tenant from the first user.
Legal, tax and compliance expertise for legally sound deployment.
Advisory and implementation for the public sector, starting with the AI readiness assessment.
The auditor asks for the evidence on one control point. The GRC tool holds a version with no approval date, the DMS an older one with approval, and the specialist department says it sent the latest one round by email long ago.
Forty-two mandatory documents, each with three repositories and two deadlines to check: the agent does the reconciliation in a single pass, and that cuts audit preparation by 50%.
The 50% reduction in audit preparation is the figure from the agent's data record and refers to the preparation time up to the finished to-do list. It is based on experience, not an audit finding.
The agent takes the catalogue of mandatory documents and looks up the current version of each entry in the GRC tool and the DMS. It records location, version and approval date on a single line.
Reconciliation list for 42 mandatory documents, 7 without current approvalThe agent compiles what is missing, what is out of date and what exists only as a draft. For every line it enters the responsible unit from the GRC tool.
Bedarfsliste_Audit_2026-09.xlsx with 7 lines and named responsibilityThe agent checks the to-do list against the deadline calendar and reports which approval falls due before the audit date. It highlights overdue dates separately.
Deadline extract for reference REV/2026/031, 4 dates within 30 daysInternal audit and the auditor decide whether the current position is good enough for an audit opinion. The agent shows what exists and what is missing.
Internal audit checks for itself whether the emergency plan really covers the control point. The agent checks existence, version and approval date.
The agent searches the GRC tool and the DMS. A version that only circulates by email stays on its list as missing until someone files it.
Connected systems
Operations
A pilot typically runs on your own data within 4 to 6 weeks. The agent connects to your existing systems rather than running as a separate, parallel environment.
EU cloud, private cloud or on-premises. Processing is GDPR-compliant and models are never trained on your data. Details in the Trust Center.
It is based on experience from comparable projects and process benchmarks, not a commitment. We work out the realistic effect for your organisation during the assessment before the pilot.