AI Chat Assistant

The AI Chat Assistant lets you ask questions about your compliance program in plain English. Get instant answers based on your documents, gaps, and framework requirements.

Accessing the Chat

Opening the Assistant

The chat assistant is available via:

Chat icon in the header
Keyboard shortcut (if enabled)
"Ask AI" buttons throughout the platform

Chat Interface

The chat window shows:

Message history
Input field for questions
Source citations
Suggested follow-up questions

What You Can Ask

Document Questions

Ask about your uploaded documents:

"What does our access control policy say?"
"Where is our incident response procedure?"
"Do we have a data classification policy?"
"What's our password requirements?"

Gap Questions

Ask about compliance gaps:

"What are our critical gaps for SOC 2?"
"How many gaps do we have in ISO 27001?"
"What's the status of our HIPAA gaps?"
"Which gaps are assigned to Sarah?"

Framework Questions

Ask about compliance requirements:

"What does SOC 2 CC6.1 require?"
"How should we implement ISO 27001 A.8.1?"
"What are the HIPAA encryption requirements?"
"Explain the PCI DSS scope definition"

Get help finding things:

"Where do I manage team members?"
"How do I create a workflow?"
"Show me the risk dashboard"
"Where are notification settings?"

Example Conversations

Finding Information

You: What does our security policy say about remote access?

AI: Based on your "Corporate Security Policy" document,
remote access is covered in Section 5.3. Key points:

- VPN required for all remote connections
- Multi-factor authentication mandatory
- Session timeout of 30 minutes
- No access from public WiFi without VPN

Source: Corporate Security Policy, pages 12-13

Understanding Gaps

You: Why do we have a gap for SOC 2 CC6.3?

AI: The gap for CC6.3 (Logical Access) was identified because
your access control policy doesn't address:

- Periodic access review requirements
- Segregation of duties
- Emergency access procedures

To resolve this gap, you'll need to document these processes
in your access control policy.

Source: Access Control Policy analysis, Confidence: High

Framework Guidance

You: What evidence do we need for ISO 27001 certification?

AI: For ISO 27001 certification, you'll typically need:

1. Statement of Applicability
2. Risk assessment documentation
3. Policies for all applicable Annex A controls
4. Evidence of control implementation
5. Internal audit records
6. Management review minutes
7. Corrective action records

Would you like details on any specific control area?

Getting Better Answers

Be Specific

More specific questions get better answers:

Less Specific	More Specific
"Tell me about security"	"What's our encryption policy for data at rest?"
"What are our gaps?"	"What critical gaps do we have for SOC 2?"
"Explain SOC 2"	"What does SOC 2 CC7.2 require?"

Provide Context

Include relevant context:

"For our SOC 2 audit, what evidence do we need for CC6.1?"
"Considering our recent acquisition, what privacy gaps should we address?"

Ask Follow-Up Questions

Continue the conversation:

"Can you explain that more?"
"How would we implement that?"
"What's the priority for those items?"

Source Citations

How Citations Work

AI cites sources when answering:

Document names and pages
Gap references
Framework control numbers
Confidence levels

Verifying Information

Always check citations:

Click the source link
Review the original content
Verify AI interpretation
Note any discrepancies

AI responses are based on your uploaded documents. The quality of answers depends on your document completeness.

Chat Capabilities

What the Assistant Can Do

Capability	Example
Search documents	"Find our password policy"
Explain gaps	"Why is this gap high severity?"
Clarify requirements	"What does this control mean?"
Summarize status	"Give me an overview of our SOC 2 progress"
Navigate	"Where do I upload documents?"
Suggest actions	"What should I work on first?"

What the Assistant Cannot Do

Limitation	Alternative
Make changes	Use the platform directly
Access external data	Upload relevant documents
Provide legal advice	Consult legal counsel
Guarantee compliance	Human review required

Chat Settings

Configuring the Assistant

Options that may be available:

Enable/disable chat
Set response length preference
Choose verbosity level
Configure suggested questions

Privacy Settings

Chat interactions:

Logged for your reference
Not shared outside organization
Can be cleared
Subject to data retention policies

Tips for Effective Use

Best Practices

Start with simple questions
- Build complexity as needed
- Let AI guide you deeper
Use document context
- Reference specific documents
- Ask about particular sections
Iterate and refine
- Follow up on partial answers
- Ask for clarification
Verify critical information
- Check source citations
- Cross-reference with documents