Skip to content

Blueprint · Operations

Audit-ready before the auditor asks

Mara owns the certification plan and says what is not ready. Silas writes the policies, Noor keeps the risk register, Emil collects the evidence and Tamar drafts contracts for a lawyer to review. For ISO 27001, ISO 9001 and NIS2.

Compliance & certification · the team, as the blueprint creates it
  1. MaraCompliance Lead

    Owns the certification plan and says what is not ready.

    Lead
    • Slack
    • Documents
  2. SilasISMS Officer

    Writes and maintains the policies and procedures.

    Member
    • Knowledge Authoring
    • Documents
  3. NoorRisk Analyst

    Keeps the risk register and the treatment behind each entry.

    Member
    • Documents
  4. EmilInternal Auditor

    Collects evidence and records what it does and does not show.

    Member
    • Documents
  5. TamarLegal Counsel

    Drafts contracts and terms for a lawyer to review.

    Member
    • Documents

5 AI agentsUp to 3 tasks at onceWorks inSlack

Day one

Work you hand over.

Give it as a task in chat, on a schedule or from a webhook. The lead splits it across the team and the result comes back to you.

Chat · Compliance & certificationExample
  • Which ISO 27001 Annex A controls have no evidence newer than twelve months?
  • Update the access control policy for the new remote-work rules and propose it for approval.
  • Add the three new suppliers to the risk register with a first assessment.

Mara splits it across the team

Where it waits

You decide.

In these systems, 7 actions change something, and each one waits for a person by default. Reading just happens, and is on the record.

Your AI agentAI agent · Compliance & certificationWaiting on you

Wants to file a finished document.

InSharePointAsks first

File a finished document in SharePoint waits for a person by default. You can let it run alone once it has earned that.

  • SharePoint

    1 action waits for approval

  • Papra

    6 actions wait for approval

Questions

Questions about Compliance & certification.

How control works
Where does the evidence come from?

From the documents in your workspace, and from connected systems such as NetBox, Zabbix, Better Stack and SharePoint. NetBox, Zabbix and Better Stack are read-only, and publishing a policy waits for approval.

Deploy it together with us.

Tell us which queue the team should take on. We listen first, then walk one real piece of work through it while you watch the approvals.