Compliance

A GRC continuous-controls-monitoring module. An 11-domain methodology catalog with 30+ production detectors (fraud, conflict of interest, anti-bribery & gifts, AML, privacy, segregation of duties, tax, third-party risk) runs over a country-neutral canonical data model at estate scale — chunked detection proven on millions of records. Alerts coalesce into managed cases with SLA; controls are executed and attested (checks + attestations); a 17-role doctrine with segregation-of-duties gates who may see and do what; everything lands in a regulator-grade audit trail. Boundary: Compliance owns detection and case/obligation handling; enterprise risk ownership, appetite, treatments and board/audit reporting belong to the Risk module — together they form the Governance Suite.

Important decision-use notice. Compliance output is an analytical signal, not proof, legal advice, an audit opinion, or an autonomous decision. Results may include false positives, false negatives, incomplete or stale matches. Independent human investigation is required before any material or adverse action. Purchase and trial require separate acceptance of the Compliance Plugin Special Terms and Risk Acknowledgment.

People are shown as they are TODAY, not only as they have ever been: an employee holding a position, a former employee, a contractor on the supply side, a company — derived from the employment, contract and ownership records and recomputed on every run, so someone who leaves, is hired back or starts invoicing you moves by herself. The "ever" flags stay untouched underneath, because a person who left last month is exactly the counterparty a related-party review must still see.

Requires the Connector module for data: Compliance consumes the normalized entities Connector publishes on the event bus (parties, identifiers, bank accounts, employments, gifts, transactions) — plan for both line items. Priced per tenant (company) per month on flat Basic / Pro / Max tiers.