Live
GDPR
Records of processing, privacy notices and processor agreements, drafted from your own data.
Compliance on autopilot.
AI agents find the gaps and draft your compliance documents. You review and approve. GDPR is live, ISO 27001 and the EU AI Act are in preparation.
Member of
Marsstein Compliance
Companies that work with Marsstein
Built for the rules that matter.
In preparation
ISO 27001
The information security management system, documented and kept current.
In preparation
EU AI Act
Risk classes, obligations and technical documentation for your AI systems.
Agents do the work. You approve it.
- 01 · OnboardingThe agent learns your company.It reads your website and documents and fills in the gap analysis for you.
- 02 · ConnectorsIt connects your tools, read-only.Connectors to GitHub, Jira, Notion, Microsoft 365, AWS and more.
- 03 · KnowledgeIt works from your own systems.It reads only your own systems, unless you allow writes.
- 04 · EvidenceIt collects the evidence.Each gap gets its proof or becomes a task with an owner.
- 05 · DraftingIt drafts the documents.Records and policies, written from your own data.
- 06 · ApprovalYou approve.Each document counts once your team reviews and confirms it.
01 · OnboardingThe agent learns your company.It reads your website and documents and fills in the gap analysis for you.
02 · ConnectorsIt connects your tools, read-only.Connectors to GitHub, Jira, Notion, Microsoft 365, AWS and more.
03 · KnowledgeIt works from your own systems.It reads only your own systems, unless you allow writes.
04 · EvidenceIt collects the evidence.Each gap gets its proof or becomes a task with an owner.
05 · DraftingIt drafts the documents.Records and policies, written from your own data.
06 · ApprovalYou approve.Each document counts once your team reviews and confirms it.
How we protect your compliance data.
Your compliance data is sensitive. Here is what protects it, as our privacy policy states it.
Encrypted in transit and at rest
TLS 1.3 between your browser and the platform, AES-256 for stored data.
Tenant isolation
Each customer organisation is strictly separated from every other.
Role-based access
Fine-grained permissions decide who sees and changes what.
Tamper-proof audit log
Hash-chained logs record what happened, and by whom.
Separate databases
Authentication, documents and the AI agent each keep their own database.
Security audits
The platform's security is audited regularly.
01What is agentic compliance?
AI agents that research your company, find the gaps against the regulation and draft the required documentation for your approval, rather than tools that only store what you type in.
02How is it different from a GRC dashboard?
A GRC dashboard organizes what people enter. Here the agents find what needs doing and draft it; you review and approve.
03Is the AI itself GDPR compliant?
We document our own processing the way we ask you to: our privacy policy names every service that processes personal data and the safeguard for each transfer outside the EU. The AI features use the Google Gemini API, and Google does not use data submitted through it to train its models.
04How long does it take to get started?
Sign in, let the agent research your company and prefill the gap analysis, then review the first drafts with our team. How long that takes depends on your company; we agree the plan with you.
Start with your gap analysis.
We run it on your company with you, then review the first drafts together.
- GDPR live, ISO 27001 and EU AI Act in preparation
- Encrypted in transit and at rest
- Nothing counts until your team approves it