Skip to content
Obligara

AI Consultant

The work of a compliance consultant, built into the workspace

Not another chat panel. A per-framework virtual consultant that scopes where you are, plans what to do next, drafts the documents, and keeps you audit-ready — while a person stays accountable for every commit and every signature.

ISO 27001 · consultantOn track
Readiness68%

Prioritised roadmap

  • ROAD-001Draft access-control policyHigh
  • ROAD-002Evidence backup-restore testsMedium
  • ROAD-003Complete supplier reviewsLow

What it does

Scope, plan, draft, maintain

It runs per framework — pick the standard you’re working on and it engages with your live workspace.

  • Readiness, computed — not guessed

    A deterministic score you can trust.

    Your readiness is the share of applicable controls that are implemented and operating — calculated from your live data, not estimated by a model. The consultant works from the same number your auditor would.

  • A prioritised roadmap

    Ranked tasks, each tied to a control.

    The consultant generates a prioritised plan of concrete tasks — each with a reference, a due-by and a link to the specific control it advances. Re-plan any time; new AI tasks supersede stale ones while your own in-progress work is preserved.

  • Required-documents checklist

    The mandatory documents, reconciled.

    It knows the documented information each framework requires and reconciles that against the documents you actually hold — flagging what’s missing, still in draft, or already in place.

  • Policy & procedure drafting

    A first draft, grounded in your data.

    Ask for a policy or procedure and it drafts a complete, organisation-tailored document from your real controls and scope — landing as an unapproved version for a person to review, edit and publish. Nothing goes live on its own.

  • A consultant you can talk to

    Answers grounded in your workspace.

    A chat dock that reads your live records inside your row-level-security boundary and can surface one-click actions — “draft & review this policy”, “show my roadmap” — instead of generic advice.

  • Maintenance on autopilot

    Certified today, ready at the next audit.

    Once you’re certified it keeps you there: recertification and surveillance-audit prep with countdowns, documents due for review, overdue control tests, and annual internal-audit and management-review reminders — generated for you.

AI proposes. You commit.

The consultant plans, reconciles and drafts — but it never saves a record, approves a document or signs off an audit. Roadmap tasks are proposals until you accept them; drafted policies land unapproved for review. The audit log only ever records a human’s signature.

How that differs from the embedded AI surfaces

An add-on, when you want the extra hand

The AI Consultant is available as an add-on to your workspace, per framework — the guidance of a specialist consultant, on call, at a fraction of the cost of one. Talk to us about enabling it for the standards you’re working towards.

Meet your compliance consultant

Pick a framework and watch it score your readiness, build a roadmap and draft a policy — against a real (or seeded) workspace.