From a new rule to finished evidence — in one system.
Four steps that used to be scattered across inboxes, spreadsheets and folders. The figures come live from our regulation inventory.
Detect
The Regulatory Radar watches official sources and reports changes before they catch you out.
Regulatory RadarClassify
Every rule enters the inventory with its source and version and is mapped to the right legal area.
See coverageImplement
Obligations become controls and policy rules; agents and workflows handle the recurring work.
See blueprintsProve
For every answer, its sources are recorded, and every audit pack is sealed so that later changes can be detected. The evidence is ready before the auditor asks.
For auditors
An audit takes four days, not a quarter.
Continuous evidence collection turns the scramble into a spot check. You arrive with a finished evidence pack, and the auditors are done sooner.
What is in the evidence pack
- Every answer with its sources, agent, model and guardrail status
- Paragraph-level source citations, exportable as evidence
- An append-only audit log and the audit pack of every compliance scan, with a checksum (SHA-256) for every file
- Continuous evidence collection instead of a deadline scramble
Model calculation from the steps above (the days add up), not a measured customer result. Two reference projects are running; we will publish figures from them only once released.
What Agentic360 takes off your plate.
Automate processes
Recurring domain and compliance work runs as a workflow — from request through approval to audit-proof filing.
Evidence every output
Every answer names its sources and can be exported as an audit PDF with agent, model and guardrail status. The guardrail blocks fabricated regulatory citations.
Operate AI safely
Tenant isolation, per-tenant encryption keys, EU hosting or on-premise — and an end-to-end audit trail for every run.
Starting point
softScheck Singapore tests, audits and certifies other companies' IT security — penetration testing, security audits, ISO 27001 consulting. Its own regulatory load is no side issue: the CSA's Cybersecurity Act and CCoP 2.0, the PDPA notification duties and the MAS requirements keep moving, and every client engagement produces findings, deadlines and escalations that have to be demonstrably worked. A firm that audits others cannot afford an attack surface of its own — client data does not leave the country.
Deployment
A dedicated Agentic360 installation on hardware in Singapore, serving its models locally: no request leaves the box, no cloud model sees client data. On it run five role-trained agents (CSA cybersecurity, PDPA, pentest & audit, ISO 27001, assistant), four live regulatory sources from CSA, PDPC and MAS, and both the IT security and the compliance scanner. ACOR, the platform’s operations resolver, brings channels, tickets, SLA clocks and escalations into one place. External pentest tooling submits findings straight into the tenant over the MCP gateway; anything at CVSS 9.0 or above waits in a review gate until a tenant admin has signed it off.
Outcome
The installation runs as the APAC pilot. Data residency and local inference are signed off, the regulatory sources are delivering, and findings from external tooling arrive in the tenant behind a review gate. Hard numbers on handling times are being collected in the pilot — they will stand here once softScheck has released them.
Starting point
Insurtelligence prices insurance premiums across several European markets. Insurance premium tax is no side issue there: every jurisdiction has its own rates, its own tax base and its own exemptions — the United Kingdom, for instance, runs a standard and a higher IPT rate — and changes arrive by Budget speech, circular or administrative guidance, not on a schedule. Get the calculation wrong and the liability comes back years later; and when someone has to prove which rate applied on which day, the answer sits in spreadsheets and email threads.
Deployment
Insurtelligence runs as its own module on Agentic360, with its own service and its own data set. For the pilot jurisdictions — Germany, France, the United Kingdom, Spain and Italy — crawlers watch the responsible sources (HMRC, BaFin, DGFiP, DGS and IVASS), and a research agent assembles the evidence behind every reported change. None of it reaches a calculation unchecked: each change moves through the review path collected, queued, reviewed, approved, and the professional sign-off stays with the partner — an autopilot can be switched on, but it is not a precondition. Approved rates are sealed with an effective date and are immutable from then on; corrections go forward as a new version, and the earlier states stay on the record. The calculation engine works against that data set, the full data set exports as a datacube, and the endpoints are reachable over the partner API.
Outcome
The module runs as a pilot on real data. The five jurisdictions are delivering, the path from source through review to an approved, versioned rate is in place, and the export is complete. It is not yet the sole source in day-to-day business. Hard numbers on effort and turnaround are being collected in the pilot — they will stand here once Insurtelligence has released them.
Built for regulated industries
See in a demo how quickly you get productive.
We show you typical workflows, how the platform is built and how rules and AI agents work together.