Every answer names the rule it read.
The document, the page and the passage. A citation the checker cannot verify is flagged on the answer, never hidden.
Solutions
Banking · Capital markets · Wealth
The rule, the control
and the evidence it rests on.
Answer the examiner, the auditor and the board with the rule and the page attached.
What survives the examination
Three things an examiner can check for themselves.
Every read is permitted, and logged.
A member sees only what they may see, in every answer and every run. The audit log shows who asked, and when.
The examination file carries its sources.
A workflow run records every document it read and holds for approval. The file leaves with its sources on record.
Today
Guidance arrives faster than the policy can follow it.
One evidence base, and the file assembles from it.
By hand
TodayWith iQ Pulse
What changesBy hand
Fragmented controls
Policies in one system, controls in another, evidence spread across departments.
With iQ Pulse
Controls with their evidence
Each control carries an owner, a status and the evidence on file, with a memo that names the gaps.
By hand
Experts searching for documents
Compliance officers spend their time finding documents rather than judging what they say.
With iQ Pulse
Cited answers
The document, the page and the passage behind every answer. An unverifiable citation is flagged, never hidden.
By hand
Guidance without a map
New guidance lands, and the policies and controls it touches are found by hand.
With iQ Pulse
Exports with lineage
The figure in the board summary traces to the row that produced it.
The workflows
Three workflows, from the rulebook to the examination file.
Shipped workflows, run over the documents you choose, with an approval step before export.
Extract obligations
Over the rulebook, the regulation or the contract you select, with every source the run used on record.
Compliance DeskReview controls
Over the policies and procedures that answer your controls, with every source on record.
Compliance DeskCreate board summary
Over the month's financials you select, held for approval; the variance drilled to its department and the board pack are the CFO Desk's own.
CFO DeskField capture
A check done at onboarding, and everything the machine read from it.
On requestThe photograph stays exactly as it arrived, with its checksum; the extracted text carries a legibility figure that measures the text rather than a model's confidence, and the candidate fields wait for review. A second reviewer corrects what is wrong and decides; only that decision turns a capture into a record.
Every return, every office
Examination preparationRegulatory changePolicy and procedure reviewControl evidenceRisk and capital reportingThird-party and vendor reviewsBoard and committee packsAudit evidence
The Desks
The Desks financial services teams reach for.
Before procurement asks
The five questions a financial services purchase turns on.
- Do you have templates for our frameworks?
- Sarbanes-Oxley, PCI DSS, the GLBA Safeguards Rule and the FCA Handbook ship as bundled templates, with SOC 2 and ISO 27001 beside them. Any other control list imports from a spreadsheet.
- Where is our data hosted, and can it stay in our jurisdiction?
- Region-pinned storage for Enterprise customers is on the roadmap and not yet shipped. Ask where your data is hosted before you sign and we will answer in writing.
- Can it run on our own infrastructure?
- Enterprise plans can run in your own cloud or on-premise, by arrangement. Every other plan runs on the hosted service.
- Does it connect to our document system?
- Uploads on every plan. Google Drive from Starter, S3 and Google Drive on Pro, SharePoint and Confluence on Enterprise. The CFO Desk's accounting connectors come with Pro and Enterprise.
- What does procurement get?
- Security questionnaires, penetration test reports, SOC 2 documentation and other security artefacts on request, from one address. GDPR and CCPA compliant, ISO 27001 aligned, SOC 2 Type II in progress.
Next step
Meet the next examination
with the sources attached.
Bring a recent piece of guidance and the controls it touches. We will import them and run the workflows with you.
Security
GDPR and CCPA compliant, ISO 27001 aligned, SOC 2 Type II in progress. Encrypted at rest and in transit. Your data never trains a model.
Security page