De.iterate launches new AI to streamline compliance workflows

Australian compliance technology company de.iterate has announced the introduction of a new artificial intelligence (AI) capability designed to support organisations in simplifying and accelerating their compliance programmes.

The enhanced AI capability, now integrated directly into the de.iterate compliance management platform, is designed to help break down complex compliance frameworks, automate laborious tasks, highlight key risks, and proactively address compliance gaps, thereby supporting organisations in meeting audit requirements and regulatory changes across multiple frameworks.

With compliance landscapes continuously evolving, particularly in light of updates to regulations such as the Australian Privacy Act and standards like ISO 27001 and SOC 2, the new AI functionality is intended to enable teams to work more efficiently and manage risk with a greater degree of confidence.

Andrew Lawrence, Founder and Chief Executive Officer of de.iterate, said, "Our goal has always been to take the pain out of compliance. This new AI capability brings us one step closer to that vision, by reducing the compliance burden and helping organisations focus on proactive risk management, not reactive fire-fighting."

Emphasising the practicality of the new tool, Lawrence added, "Our new AI capability goes beyond simple automation. It plays an active role in your compliance workflow: helping you spot issues before they become audit findings, surfacing risks and control gaps, and will even review your evidence before your auditor does."

Platform integration

The latest functionality is built into the de.iterate platform and is being made available to users without additional charges. Instead of serving as a standalone product, it offers real-time compliance support in four main areas:

• Documentation intelligence: The AI reads business policies and procedures, checks compliance mappings, and identifies gaps between stated intentions and actual implementations prior to audits.
• Risk and control mapping: The AI assistant suggests mitigating controls and helps align risks with business contexts and supplier relationships.
• Audit readiness and evidence review: Before engaging external auditors, the AI reviews evidence to ensure completeness, accuracy, and relevance, assisting with internal assurance processes.
• Real-time answers: Users can query the AI for framework-specific guidance, such as requirements under ISO 27001 or policy coverage for password practices.

Lawrence commented, "Compliance isn't just a once a year activity to ensure you pass your audit—it's a continuous demonstration of intent, trust, and transparency. Our new AI capability empowers teams to stay on top of their compliance workload by working smarter."

Regulatory focus

The AI capability is designed to support a range of compliance standards including ISO 27001, ISO 9001, ISO 14001, ISO 45001, and DISP, among others, with a particular focus on the needs of Australian organisations operating under local regulatory requirements.

Responsible AI governance is a central element of the implementation. All actions driven by the AI require user approval, and transparent explanations are provided throughout the process. de.iterate reported that it has adopted ISO 42001, the international standard for Artificial Intelligence Management Systems, and conducted an AI Impact Assessment to support safety, trust, and transparency in its platform.

We believe AI should augment people, not replace them," said Lawrence. "That's why we've implemented this technology to support human judgment - not replace it.

He continued, "Every action our new AI functionality enables, whether reviewing evidence, suggesting a control, or mapping a policy, requires human oversight, review and approval. You're always in control, with full transparency and clear rationale behind every recommendation."

Future roadmap

While the current release focuses on review, mapping, and generating insights, de.iterate has indicated that upcoming development cycles will introduce the ability for the AI to act on users' behalf, such as retrieving data from integrations, completing assurance tasks, and automating aspects of framework building.

Businesses seeking early access and wishing to provide feedback on the evolving features are invited to contact de.iterate directly.