Internal Control & Audit
Internal control: policy to remediation, closed loop
Turns the whole internal-control chain—policy, risk, controls, inspection, findings, remediation, assessment, reporting—into a configurable delivery: an in-database check engine runs 71 baseline rules (covering all 18 application guidelines) plus industry packs for government, enterprise, education and healthcare, each hit carrying its regulatory clause and source evidence. 33 storage-layer triggers (across 20 core tables, via 5 trigger functions) enforce segregation of duties, one-way state machines and audit trails at the storage layer (even TRUNCATE leaves a trace), with audit events landing in an immutable, undeletable ic_audit_log. Onboarding a new customer means swapping rule packs and mapping their data to ic_ business tables, not writing code; the management console and scheduled inspections are in production, with tenants isolated per database.