The short answer
In governance, risk and compliance software, an AI agent is an assistant built into the workflow that does a specific job for you, such as drafting a record, reading the evidence, or watching for changes, and shows its working so a person can check it. In CGRC AI the AI works at every stage of the cycle: report, investigate, act and prove. It drafts and suggests. People always decide.
What the AI does at each step
1. Report
Staff describe what happened in their own words, by typing or dictating in a supported browser, and the AI drafts the form, including a suggested category and actions. The person checks and edits it before anything is saved. This works across all modules, from incidents and complaints to contracts and board meetings.
2. Investigate
The AI reads the record, your organisation's own policies and your earlier similar closed cases, and writes an analysis that names which ones it used. You can also ask it questions about the record in a chat. It sees only your organisation's own data, and it shows you the past cases it considered so you can judge them.
3. Act
Actions are assigned with owners and deadlines. Stages can have target times, and overdue items are flagged and escalated. Where an organisation has regular audits, the AI helps theme the free-text answers from many departments into the main points.
4. Prove
An action can be verified by someone other than its owner. The system compares open records with earlier ones that were closed as fixed, and warns when a similar problem comes back. Results can be trended across repeat audits and exported to Excel.
More ways the AI helps
- Regulatory change monitor. It watches the public pages you choose, such as a law or guidance page, and when the text changes it drafts proposed changes to your controls. Your compliance lead approves every change. Nothing updates itself.
- Themes. It groups related records across modules, so patterns show up sooner.
- Your language. It writes in the language of the person using it, with English, French, Spanish and Arabic supported.
- AI systems register. A register for the AI systems your own organisation uses or builds, with risk tier, human oversight and review dates, useful as AI regulation develops.
Control and safety
- People decide. The AI drafts and suggests. Every record is reviewed by a person.
- Sources shown. The AI says which policies and past cases it used, and you can rate whether an answer was useful.
- Your data stays yours. It is not trained on a customer's data and never sees another customer's.
- You can switch it off. An administrator can turn AI off for the whole organisation, for chosen modules, or for particular groups of users.
- Anonymous reports are protected. Voice dictation is switched off on anonymous whistleblowing reports.
What to ask any supplier about AI
- What exactly does the AI do at each step, and can I see an example on my own kind of record?
- Does it show what it used, so my team can check it?
- Who makes the final decision?
- Is my data used to train a model, and could another customer ever see it?
- Can I turn it off for some modules or some people?
- What does it not do?
CGRC AI is at pilot stage. It records and tracks, it does not file reports with regulators for you, and we hold no formal certifications yet.
Common questions
What are AI agents in governance software?
They are AI assistants built into the workflow that do specific jobs, such as drafting a record from a plain description, analysing it against your own policies and past cases, or watching for changes in regulations, and that show their working so a person can check the result.
Does the AI make the decisions?
No. In CGRC AI the AI drafts and suggests, and a person reviews and decides every record.
Is our data used to train the AI?
No. CGRC AI's AI is not trained on a customer's data and never sees another customer's data.
Can the AI be turned off?
Yes. An administrator can turn the AI off for the whole organisation, for chosen modules, or for particular groups of users.
Which languages does the AI support?
It writes in the language of the person using it, with English, French, Spanish and Arabic supported.
Related pages
Interested in being a pilot partner? Get in touch and we will arrange a conversation.
Last updated 12 October 2026.