Compliance AI continuously maps regulatory and policy requirements to obligations, controls, evidence, gaps, owners and remediation — with versioned sources and explicit human accountability.
✓ LIVE Add-on to any Samloryx product · also stand-alone
Every requirement traces to its source, and every gap traces to its remediation. No orphan checklists, no mystery findings.
A versioned source — law, regulation, contract, tender, lease, licence or policy — with provenance and effective dates.
What your organisation must do — subject, action, owner, frequency, due date, materiality.
The internal control that answers the obligation, with design and operating status.
The document or record proving the control ran — with freshness and provenance.
Missing or stale evidence, weak controls, findings — severity-ranked and visibly unresolved.
Owned tasks created through Flow, tracked to closure with closure evidence.
An exportable pack — evidence, findings, remediation history and the complete decision path.
The same chain runs on contracts, leases, tenders and internal policies — one shared Obligation Graph with Legal AI, not two registers.
Each agent runs at a task-specific authority level enforced in the shared runtime — the same ladder as every Samloryx agent.
| Agent | Authority at V1 | What it does |
|---|---|---|
| Regulatory Watch | OBSERVE / RECOMMEND | Monitors configured official sources, detects changes, preserves provenance and creates review items. |
| Applicability | RECOMMEND | Suggests which packs and requirements may apply — never silently asserts legal applicability. |
| Obligation | PREPARE | Converts approved requirements into structured obligations with owners, frequencies and due dates. |
| Control | RECOMMEND | Maps obligations to internal controls and flags coverage gaps. |
| Evidence | PREPARE | Finds, classifies and links the documents that support controls; flags stale or missing evidence. |
| Assessment | RECOMMEND | Runs evidence-backed assessments and produces cited findings. |
| Gap & Remediation | PREPARE | Creates remediation plans and tasks, then tracks closure through Flow. |
| Policy | DRAFT | Reviews and prepares policy drafts against approved playbooks and configured requirements. |
| Third-Party Compliance | RECOMMEND | Assesses suppliers and partners against configured evidence requirements. |
| Audit Pack | PREPARE | Assembles evidence, findings, remediation history and provenance for audit or review. |
| Executive Compliance | RECOMMEND | Daily and weekly management briefings of material compliance exposure. |
Authority is task-specific, per agent, and fails closed when approval, jurisdiction or source confidence is missing. See the Trust Centre →
Packs are versioned knowledge with source provenance, effective dates and applicability metadata, reviewed by humans — never static prompt text that silently goes stale.
| Pack | V1 focus | Launch treatment |
|---|---|---|
| POPIA / PAIA | Information governance: Information Officer and records workflows, assessments, breach-response evidence, retention and processing controls. | ✓ LIVE pack Configuration & evidence support — not legal certification |
| Corporate / Companies | Governance obligations, records, resolutions, recurring company tasks and configured corporate controls. | ✓ LIVE |
| FIC / AML | For qualifying accountable-institution pilots: RMCP controls, CDD evidence, sanctions/PEP workflow hooks, reporting and record-keeping control model. | ◷ Regulated pilot only |
| Construction compliance | CIDB and company evidence, H&S and admin evidence, project and contract compliance packs. | ✓ LIVE within Construct |
| Employment / workforce | Configured policy, certification, training and evidence tracking. | ✓ LIVE |
| Customer-defined frameworks | Your own policies, ISO-style control sets, contractual obligations and internal audit checklists. | ✓ LIVE capability |
A project, property, engagement, campaign or case exposes a Compliance tab in place — the lens changes, the record doesn't move.
Tender and company compliance packs, site and project evidence, supplier compliance — and which live bids each expiry would block.
Lease and property compliance evidence, tenant data privacy, contractor evidence and inspection records per building.
Client onboarding controls, privacy and records obligations, professional evidence and policy controls.
Regulated control and evidence framework; the FIC/AML pack runs as a regulated pilot with approvals and audit throughout.
Consent and suppression controls, campaign policies — and the evidence that every send stayed inside them.
Contract clauses become monitored obligations in the same register as regulatory duties — nothing copied, nothing forked.
Run a compliance assessment on your real evidence — coverage, gaps and a remediation plan, with sources visible throughout.