RiskHeatMap.aiGoverned demo

Trust & Compliance

Explainable by design

AI transparency and oversight

Document how the deterministic agents behave, how much human oversight is active, and how the system maintains a visible audit trail for compliance reviewers.

Human approval remains required before controls, risks, and actions are finalised.

Pending oversight

10

Generated artifacts still waiting on analyst approval, rejection, or override.

Approved outputs

7

Artifacts already accepted by a human reviewer across controls, issues, risks, and actions.

Sensitive records

2

Incident packages flagged by the Data Classification Agent as requiring tighter review.

AI transparency panel

This MVP uses deterministic agent logic so every generation path can be explained and reviewed.

Generation mode

Deterministic simulation

Rules derive RCA, issue framing, control posture, risk types, and recommended actions from incident text.

Human control points

Review queue actions allow approval, rejection, or override before an output becomes an accepted record.

Traceability

Every generated or reviewed artifact can be traced through the audit trail viewer below.

Human oversight stats

Operational guardrails that show where human review is still active.

Review coverage

37%

Share of current reviewable outputs that already have human approval.

Open review load

10

Controls, issues, risks, and actions that still require a human decision.

Data classification agent

Basic P0–P4 text classification with sensitive-data flagging across seeded incident packages.

Vendor access review evidence overdue

P3Standard

Standard internal business content was detected.

workflow

Customer data export after Snowflake role misconfiguration

P1Sensitive

Sensitive data indicators were detected and should remain under restricted review.

paymentcustomer datamisconfigurationworkflowmonitoring

Payment outage due to API misconfiguration

P1Sensitive

Sensitive data indicators were detected and should remain under restricted review.

paymentmerchantoutagemisconfigurationmonitoring

Disclaimers

Explicit product caveats for safe usage during the MVP phase.

Outputs are simulated and should not be treated as final compliance or legal conclusions.
The Data Classification Agent uses keyword-based logic and can miss context-sensitive edge cases.
Human reviewers remain responsible for approving issues, controls, risks, and actions before use.

Audit trail viewer

Chronological system and reviewer events that support governance and traceability.

Risk

Review Rejected

Jul 15, 2026, 10:53 AM

Human Reviewer acted on risk risk-data-residual.

Control

Review Rejected

Jul 15, 2026, 10:53 AM

Human Reviewer acted on control control-data-export.

Control

Review Rejected

Jul 15, 2026, 10:53 AM

Human Reviewer acted on control control-data-export.

Issue

Review Approved

Jul 15, 2026, 10:53 AM

Human Reviewer acted on issue issue-data-002.

Issue

Review Approved

Jul 11, 2026, 2:10 AM

Human Reviewer acted on issue issue-vendor-003 for Vendor access review evidence overdue.

Evidence

Evidence Overdue

Jul 11, 2026, 1:30 AM

Evidence Monitor acted on evidence evidence-access-review for Vendor access review evidence overdue.

Action

Exports Paused

Jul 10, 2026, 3:27 AM

Security Operations acted on action action-data-pause for Customer data export after Snowflake role misconfiguration.

Incident

Sensitive Data Flagged

Jul 10, 2026, 3:20 AM

Agent:Classification acted on incident inc-data-002 for Customer data export after Snowflake role misconfiguration.

Incident

Anomalous Export Detected

Jul 10, 2026, 3:18 AM

Connector:Snowflake acted on incident inc-data-002 for Customer data export after Snowflake role misconfiguration.

Breach

Breach Record Created

Jul 8, 2026, 8:52 AM

Agent:Breach acted on breach breach-payments-001 for Payment outage due to API misconfiguration.

Control

Controls Classified

Jul 8, 2026, 8:49 AM

Agent:Controls acted on control control-pay-monitoring for Payment outage due to API misconfiguration.

Rca

Rca Generated

Jul 8, 2026, 8:47 AM

Agent:RCA acted on rca rca-payments-001 for Payment outage due to API misconfiguration.

Incident

Incident Ingested

Jul 8, 2026, 8:45 AM

System acted on incident inc-payments-001 for Payment outage due to API misconfiguration.