Lughlabs
Try One free
For Individuals
For Teams
Make it work for youComplianceAccountingSales & Marketing CampaignsContent CreationDaily OperationsRecruiting
Contribute
Developer Docs
A good place to startContact usHelp centerTrust & deploymentAbout Lughlabs
One for Compliance

Security reviews, answered with sources.

Your bots read your policies, fill the questionnaire and cite a source for every answer. Anything no document supports comes back to you.

Bring a questionnaire
In practice

The reviews on your desk.

118 questions, answered with sources.

Rae fills the buyer’s spreadsheet from the policies in your Wiki and marks what it can’t support.

Skip the demo

Fictional company · Sped up

Your crew

Three bots. One review team.

Rae

Security answers

Does
  • Fills questionnaires from your Wiki
  • Writes the source beside each answer
  • Flags what no document supports
Works in
  • Google Drive
  • Confluence
  • Notion
  • Gmail
Runs
When you send it a questionnaire
Asks you first
Before sending external email
Brief

A bot that answers security questionnaires from our policies and past answers, cites a source for each, and flags anything unsupported for me.

Start with Rae

Ida

Audit evidence

Does
  • Checks the auditor’s list each month
  • Links evidence in Drive, Jira, GitHub
  • Names what’s missing and who owns it
Works in
  • Google Drive
  • Jira
  • GitHub
  • Slack
Runs
Monthly on the 1st at 8:00 AM
Asks you first
Before it changes anything in Jira
Brief

A bot that checks our auditor’s request list each month against Drive, Jira and GitHub, links the evidence, lists what’s missing, and asks before creating tickets.

Start with Ida

Corin

Vendor reviews

Does
  • Reads trust pages and sub-processors
  • Writes a one-page memo with links
  • Lists questions for the vendor
Works in
  • Google Docs
  • Notion
  • Slack
  • Gmail
Runs
When someone asks about a vendor
Asks you first
Before sending external email
Brief

A bot that reviews new vendors: reads their trust page and sub-processors, and writes a one-page memo with links and open questions.

Start with Corin
Who does what

One prepares. People attest.

The crew drafts and cites. You approve and send. Auditors test and attest.

Crew
  1. ReadRae, Ida, CorinWiki access: SOC 2 report for Rae only
  2. DraftRae, CorinApp sign-ins stay out of the model’s input
  3. CiteRae, IdaA source beside each answer
  4. FlagRae, Ida, CorinConflicts wait in the Wiki’s Review
You
  1. Review gaps
  2. ApproveRule: ask before sending email
  3. Send
Auditor or buyerOutside One
  1. Test
  2. Attest
  3. Certify

One prepares and organises; it does not certify, attest or give legal advice. SOC 2 reports come from CPA firms, ISO 27001 certificates from accredited bodies. See our Trust page.

Works with

Where your evidence lives.

  • Reads policies and finds evidence filesOne-click connect
  • Reads policies and writes memos and draftsOne-click connect
  • Reads and fills questionnaires and evidence listsOne-click connect
  • Finds and works with workspace recordsOne-click connect
  • Finds and works with workspace recordsOne-click connect
  • Reads your policies and past answersOne-click connect
  • Reads your policies and runbooksOne-click connect
  • Finds and works with workspace recordsOne-click connect
  • Finds and works with workspace recordsOne-click connect
  • Finds tickets as evidence; opens new ones when you allowOne-click connect
  • Reads and updates tasksOne-click connect
  • Reads and updates tasksOne-click connect
  • Reads and updates support recordsOne-click connect
  • Reads and updates support recordsNeeds a one-time setup
  • Finds reviews, branch rules and change historyOne-click connect
  • Works with repository recordsOne-click connect
  • Reads the threads where questions arriveOne-click connect
  • Reads schedules and meeting detailsOne-click connect
  • Drafts replies to buyers and vendorsOne-click connect
  • Reads mail and drafts repliesOne-click connect
  • Works with envelopes and signaturesNeeds a one-time setup
  • Works with forms and signed documentsConnect with your key
  • Works with forms and signed documentsOne-click connect
  • Reads controls and compliance evidenceBring your own MCP / OpenAPI
  • Reviews controls, risks and evidenceBring your own MCP / OpenAPI
  • Reads and updates compliance recordsBring your own MCP / OpenAPI
  • Works with compliance automation recordsBring your own MCP / OpenAPI
  • Any MCP server or OpenAPI tool

Trademarks belong to their owners. Availability varies by deployment.