Detect gaps
The agent reads the extract from the asset register. For each organisational unit it identifies which mandatory fields are empty.
Extract from Asset-Register_2026-08.csv, 38 target objects in Department 40Generates for each organisational unit just the follow-up questions still outstanding there.
Developed in Germany · Hosted in the EU or on-premises
Delivered together with
A department receives a template with 40 fields and fills in the ones it can answer anyway. The information security office then works out by hand what is missing and asks again.
Instead of 40 fields, Department 40 receives four questions, each with its target object and deadline. With 55% fewer follow-up rounds, the round closes without a second chaser email.
The 55% reduction in follow-up rounds is this agent's headline figure. The four lines describe a typical survey round; they are not measurements.
The agent reads the extract from the asset register. For each organisational unit it identifies which mandatory fields are empty.
Extract from Asset-Register_2026-08.csv, 38 target objects in Department 40The agent drafts questions only for the open fields. For each question it names the target object concerned.
Rueckfrage_Amt40.md with 4 questions instead of 40 fieldsThe agent creates a ticket with a deadline for each organisational unit. It reports which questions remain unanswered.
Ticket ISB-2026-0184 with the deadline in the subject lineIt creates the ticket and the email draft. The information security office sends them out.
If a department enters the wrong responsible person, the agent accepts it. Plausibility is settled in conversation.
Its four questions come from the empty mandatory fields of the 38 target objects in Asset-Register_2026-08.csv. If the department runs an application that is not in the register at all, the agent will not ask about it either.
Connected systems
Operations
A pilot typically runs on your own data within 4 to 6 weeks. The agent connects to your existing systems rather than running as a separate, parallel environment.
EU cloud, private cloud or on-premises. Processing is GDPR-compliant and models are never trained on your data. Details in the Trust Center.
It is based on experience from comparable projects and process benchmarks, not a commitment. We work out the realistic effect for your organisation during the assessment before the pilot.