Compliance workflow, ktorý vie pracovať aj s živými dátami.
Regulation → requirements → controls → evidence/observations → confidence → findings → remediation. S tenant isolation, audit trailom, customer assurance a enterprise identity vrstvou.
NIS2, ISO 27001, DORA, GDPR
288+ seeded requirements, cross-framework mappings a slovenský 151-položkový deep pack.
Entra, Azure, AWS, GitHub, Jira
Provider observations sa vyhodnocujú ako automatické controls s históriou a webhook events.
Riziká, assets, suppliers
Kritickosť, reviews, dependencies, risk acceptance a väzby na nápravné opatrenia.
Incidenty a vulnerabilities
Timeline, custody, notification decisions, scanner import, exceptions, retest a closure.
Policies a continuity
Verzie, approvals, acknowledgements, BCP/DR, RTO/RPO a exercises.
Audit campaigns
Evidence requests, testing, findings, independent closure a podpísané auditné packy.
API a webhooky
Workspace-scoped keys, scopes, auditované mutácie a HMAC-signed webhook delivery queue.
OIDC SSO + SCIM 2.0
Authorization Code + PKCE, signed ID-token validation, JIT, Users/Groups provisioning a deprovisioning.
Consultant/MSP portfólio
Readiness, overdue, critical risks a automation failures naprieč oddelenými klientmi.
Regulatory Change Intelligence
Oficiálne sources, verzované snapshots, mechanický diff, human impact review a remediation bez automatického právneho verdiktu.
Trust Center + questionnaires
Customer assurance artifacts, request-access grants a citation-first questionnaire drafty s povinným ľudským schválením.
Import, confidence a Ask WOV
CSV/XLSX/DOCX migration preview, explainable evidence confidence a tenant-scoped assistant s citáciami a review.
Citlivé compliance dáta potrebujú viac než login.
- Server-side tenant isolation a permission RBAC
- MFA + step-up pre citlivé operácie
- HMAC chained audit trail a integrity checks
- Šifrované integration credentials; digestované API/SCIM tokeny
- CSP, HSTS-ready deployment, secure cookies a release hygiene gates