Internal Control & Audit
FlagshipInternal control: policy to remediation, closed loop
Turns the whole internal-control chain—policy, risk, controls, inspection, findings, remediation, assessment, reporting—into a configurable delivery: an in-database check engine runs 71 baseline rules (covering all 18 application guidelines) plus industry packs for government, enterprise, education and healthcare, each hit carrying its regulatory clause and source evidence. 33 storage-layer triggers (across 20 core tables, via 5 trigger functions) enforce segregation of duties, one-way state machines and audit trails at the storage layer (even TRUNCATE leaves a trace), with audit events landing in an immutable, undeletable ic_audit_log. Onboarding a new customer means swapping rule packs and mapping their data to ic_ business tables, not writing code; the management console and scheduled inspections are in production, with tenants isolated per database.
Reuses the family-wide JWT and protocol layer; oversight-report agents are produced by the Agent Factory and run on Loom scenarios
Service Info
Key Features
Rules as SQL
71 baseline rules (covering all 18 application guidelines) plus industry packs live in an in-database function; changes need no release
Traceable to the clause
Every rule cites its regulatory clause, so each hit traces back to the source
Invariants enforced in the database
33 storage-layer triggers guard segregation of duties, one-way states and audit trails, even off-application
End-to-end loop
Inspection to remediation to reporting in one loop: 66 tables across six domains, 20 core tables guarded by triggers
New customer, new rule pack
Checkpoint YAML generates rule packs; map customer data into ic_ tables and go, tenants isolated per database