Run the day-to-day compliance program with AI co-pilots
You own framework readiness end-to-end: mapping controls, chasing evidence, tracking remediation, and preparing certification packs. Clarivexa gives you an operating cockpit so nothing slips.
User journey
- 1
Start from the dashboard
Open /app to see readiness gauges per framework, top overdue tasks, expiring evidence, and any AI proposals waiting for your review.
Example: You spot Kenya DPA at 71% readiness with 3 overdue tasks. Click through to Frameworks → Kenya DPA and open the control drawer. - 2
Review control status & readiness impact
Each control card shows implementation status, linked evidence, and a live readiness-impact chip explaining how open/overdue remediation drags the score down.
Example: Control KDPA-3.2 shows 'Impact: -6% (2 open, 1 overdue)'. Hover the chip to see exactly which tasks and calculations drive the number. - 3
Trigger a control test
From the control drawer, run 'Test control'. Attach evidence, mark pass / partial / fail, add rationale. Partial and fail automatically create remediation tasks with owners, priorities, and due dates.
Example: You mark backup restore as 'partial' → a medium-priority task 'Repair Nairobi DC backup restore automation' is generated with a 30-day due date and assigned to the InfoSec lead. - 4
Ask the Copilot for help
Open /app/copilot and describe the outcome you want. The Copilot plans, delegates to specialist agents (evidence, policy, risk, vendor, bias), and queues proposals in the Review Inbox.
Example: Prompt: 'Draft a Kenya DPA-compliant privacy notice for our micro-loan product.' The Policy agent produces a full document; you see it in /app/inbox. - 5
Approve AI proposals in the Inbox
Nothing mutates live GRC data without a human signature. Review the diff, edit if needed, then approve. Approved outputs flow into evidence, policies, or risk scores automatically.
Example: You approve the privacy notice → it lands in the Evidence Library, linked to KDPA-2.1 and KDPA-4.3, and is downloadable as PDF for legal sign-off. - 6
Close remediation & watch readiness climb
As tasks move to Done, the linked control status auto-updates and readiness recomputes in real time. Every change writes to an audit log you can export.
Example: Restore automation task marked Done → KDPA-3.2 moves to 'Implemented' → Kenya DPA readiness jumps from 71% to 78% on the executive dashboard.
Outcomes
- Framework readiness is always current, not reconstructed the week before an audit
- Every remediation action has an owner, due date, and immutable audit trail
- Certification documents are drafted in-app and downloadable as polished PDFs