# Compliance, risk and policy management software | BoardX > Frameworks, controls, risk registers and policies in one AI platform, with employee attestations and agentic completion under human oversight. Canonical URL: https://www.boardx.io/risk-and-compliance Compliance & Risk # Keep your organisation compliant and moving forward faster. Fly through compliance work with the leading AI-driven GRC platform, so you never have to ask, “Are we compliant with the regulations that apply to us?” See how it works ## It’s time to simplify, speed up and transform your compliance. With obligations, controls, policies and risks in one BoardX workspace, your organisation can see its compliance position in one place, keep every policy and control current, and give the board and the regulator clear evidence of oversight. No more chasing spreadsheets before every committee meeting. See the compliance workspace ## AI is here to help you get there faster. BoardX’s AI GRC agents take on the heavy lifting: scanning for regulatory change, mapping new obligations to your policies and controls, finding the gaps and chasing the evidence. Your team reviews and approves, and spends its time on the judgement calls that keep your organisation safe. Every agent output cites its source and stays a draft until a named person approves it. Meet the compliance agents Regulatory change · Central Bank update Illustrative - **ALERT** New consumer protection guidance publishedHorizon scanning · relevance 92 / 100 for your entity - **MAPPED** 3 obligations drafted, each anchored to its clauseLinked to Lending policy and 2 master controls - **GAP** Complaints-handling policy does not cover the new timelineQuoted text from both documents · fix drafted Compliance officer review Approve · Edit · Reject How BoardX AI works ## Three engines behind every assessment. ### Document indexing engine Reads documents the way a compliance professional does - Indexed by structure: sections, clauses and pages - Each clause read with its definitions and cross-references - Every judgement cites the clause and page ### Calibrated decision layer Knows when it is sure, and when it isn’t - Each criterion judged with a confidence score - Scores measured against expert review - Low confidence goes straight to a named reviewer - Fast and efficient enough to run continuously ### Compliance harness Memory and skills around your system of record - Obligation, control and evidence model built in - Separate memory for each customer - Assessment skills codified from expert method - Full audit trail, built for EU data sovereignty Risk management ## From a risk register to a board-level conversation. - 01 **Immersive risk heat map** Inherent, residual and target risk, against appetite. - 02 **Actions, controls and response plans** Every risk has an owner, a control set and a plan. - 03 **Linked to the papers** When a risk moves, every paper it relates to shows it. Policy management ## The policy library. Not another folder to chase. - 01 **One central workspace** Every policy, its current version and its history. - 02 **Owners, approvers and review dates** Reminders before a review falls due, with board approval on record. - 03 **Status at a glance** Dashboards across all policies, ready for the committee pack. - 04 **Employee portal** Get employee attestations, with AI search across every policy. Compliance ## Your obligations, controls and evidence in one system of record. Import your frameworks, map master controls to every entity and run assessments on a set frequency. Results roll up into the board and committee packs. Available today STEP 1 ### Authority frameworks Regulations and standards, with citations. Available today STEP 2 ### Roles and evidence Owners, accountability and linked policies. Available today STEP 3 ### Master controls Mapped to frameworks and entities, with a frequency. Available today STEP 4 ### Assess and monitor Control assessments, scores and remediation. Compliance agents ## Agents on the compliance system you already run. Not a new product to adopt. Six agents work inside your BoardX frameworks, controls and assessment cycles, and their results reach the board. Six compliance agents - **Horizon scanning** AI-summarised alerts from named Irish, UK and EU regulator sources, scored for relevance to each entity. - **Impact and obligation mapping** Regulatory updates become draft obligations, each anchored to its clause and linked to policies and owners. - **Policy and control management** Proposes controls, owners and entity links, with policy redlines when obligations change. - **Gap analysis** Finds gaps in policies, processes or controls against new rules, quoting both texts. - **Continuous control and risk monitoring** Pre-fills control assessments, chases evidence and reopens controls when a rule changes. - **Marketing compliance** Checks campaigns, rate advertising and fundraising appeals against the rules before they go live. Where BoardX goes further ### Higher accuracy Private IQ’s page index anchors every output to its clause, and filters out rules that don’t apply before extraction. ### Board-level assurance Agent outputs roll up into board and committee packs. Compliance tools usually stop at the compliance team. ### Already the system of record Agents write into the frameworks, controls and assessment cycles you already run in BoardX. Every output is a draft until a named person approves it. Regulatory coverage ## Frameworks ready to load into BoardX. Import the regulations and standards your organisation answers to, then map them to your policies, controls and risks. ### Financial services Central Bank Regulations FCA PRA DORA ### Housing AHBRA Regulator of Social Housing ### Charities & public bodies Charities Governance Code Health Service Executive ### Security, data & AI ISO 27001 NIS2 GDPR EU AI Act NIST AI RMF Cyber Essentials See BoardX in action ## See risk and compliance inside the board pack. Bring one live risk and one policy. We’ll show you how they reach the board.