Controls that prove themselves
Every control with one plain verdict — working, partly working, not working — built from self-assessments, independent tests, continuous monitoring and indicators. Owners confirm in one click; agents prepare the evidence.
- 1 click
- for an owner to confirm a control works
- Continuous
- assurance from evidence, not chasing
- Test once
- counted for every framework it serves
Specialised agents do the work. Your people decide.
Assurance is where lean teams drown. These agents gather, prepare and test — and the person whose name is on the control signs.
Control assurance agent
Two weeks before a self-assessment is due, prepares it from the control's evidence and last test, citing each piece — and says whether all is clear.
You confirm: the self-assessment, with your signature
Attribute tester
Tests sampled items against each attribute of a test plan and records what it found and why.
You confirm: the test conclusion
Evidence classifier
Reads uploaded evidence, recognises what it is and which controls it proves, and notes when it goes out of date.
You confirm: the links it proposes
Control writer
Writes a control from a requirement: what is done, by whom, how often and the evidence it leaves.
You confirm: each field it suggests
Control rationalisation
Finds controls that duplicate each other across entities and frameworks, and proposes one to keep.
You confirm: which controls to merge
Every agent runs through Vigil8's governed AI core: guardrails, cited sources, a full ledger and a kill switch.
Everything controls & assurance needs, in one place
"Confirm it works"
The control owner's main button: working, partly or not, with a note and evidence — kept as a signed self-assessment.
Self-assessment campaigns
Templates, recurring schedules, reminders and signatures; contradictions with evidence and tests are flagged.
Testing
Test plans, populations, samples and attributes; failed samples raise issues automatically.
Continuous monitoring
Evidence collectors and control indicators keep the verdict honest between tests.
Evidence and requests
Evidence linked once to the controls it proves, with validity dates, and requests to owners by link.
One plain verdict
Working, partly working, not working, not yet checked — and "why this status?" for anyone who asks.