Let AI do the first review. Keep humans in control.
AI assists with assessment responses, missing evidence, document extraction, contract analysis and suggested risks. Compliance decisions remain with your team.
AI Finding
78% confidenceDisaster recovery testing evidence is missing.
The response describes testing but no test report was attached for the current period. Requires human review before any compliance decision.
Reviewed by Sarah Martin · AI suggestions never change compliance status automatically.
Capabilities
What you get
Assessment review
Highlight vague or incomplete vendor answers for a reviewer.
Missing evidence detection
Spot claims that are not supported by a document.
Document extraction
Pull validity dates, scope and auditor from uploaded reports.
Contract analysis
Map contract text to DORA clause requirements.
Suggested risks
Propose a risk with severity for human confirmation.
Controls
AI features can be disabled per workspace, with all suggestions logged.
Assistance, not automated compliance decisions.
Suggestions are labelled, scored and reviewable. Nothing changes a compliance status without an explicit human action.
- Confidence score on every finding
- Accept, dismiss, request clarification or create a risk
- Reviewer identity recorded in the audit trail
- Source passage shown alongside each suggestion
ASM-2041 · Halcyon Annual ICT Assessment
Under Review117 questions · 12 sections · vendor submitted 4 August 2026
Section progress
- Governance & Oversight100%
- Information Security92%
- Business Continuity64%
- Incident Management88%
- Subcontracting45%
Q 4.3 · Business Continuity
Describe the frequency and scope of your disaster recovery testing.
“DR testing is performed periodically across production regions.”
AI Finding
78% confidenceDisaster recovery testing evidence is missing.
The response describes testing but no test report was attached for the current period. Requires human review before any compliance decision.
Reviewed by Sarah Martin · AI suggestions never change compliance status automatically.
Workflow
How the workflow runs
Get your ICT third-party risk under control.
See how one platform connects your ICT providers, assessments, evidence, contracts, risks and DORA Register.