# Compliance: security reviews, sourced · One by Lughlabs

> Your bots read your policies, fill the security questionnaire and cite a source for every answer. Anything no document supports comes back to you.

URL: https://lughlabs.ai/use-cases/compliance/

One for Compliance

## Security reviews, answered with sources.

Your bots read your policies, fill the questionnaire and cite a source for every answer. Anything no document supports comes back to you.

[Bring a questionnaire](https://lughlabs.ai/talk?plan=business)

In practice

### The reviews on your desk.

#### 118 questions, answered with sources.

Rae fills the buyer’s spreadsheet from the policies in your Wiki and marks what it can’t support.

#### Audit evidence, found before the auditor asks.

Every month, Ida checks the auditor’s request list against Drive, Jira and GitHub.

#### A new vendor, checked before you sign.

Corin reads the vendor’s trust page and sub-processors, then writes a memo with links.

#### One policy changed. Every answer updated.

Tell Rae what changed. It finds the stale policies and saved answers, and drafts the redlines.

[Skip the demo](https://lughlabs.ai/use-cases/compliance/#ucx-after-stage)

Fictional company · Sped up

Your crew

### Three bots. One review team.

Who does what

### One prepares. People attest.

The crew drafts and cites. You approve and send. Auditors test and attest.

Crew

1. Read Rae, Ida, Corin Wiki access: SOC 2 report for Rae only
2. Draft Rae, Corin App sign-ins stay out of the model’s input
3. Cite Rae, Ida A source beside each answer
4. Flag Rae, Ida, Corin Conflicts wait in the Wiki’s Review

You

1. Review gaps
2. Approve Rule: ask before sending email
3. Send

Auditor or buyer Outside One

1. Test
2. Attest
3. Certify

One prepares and organises; it does not certify, attest or give legal advice. SOC 2 reports come from CPA firms, ISO 27001 certificates from accredited bodies. See our [Trust page](https://lughlabs.ai/trust).

Works with

### Where your evidence lives.

Search apps

- Reads policies and finds evidence files **One-click connect**
- Reads policies and writes memos and drafts **One-click connect**
- Reads and fills questionnaires and evidence lists **One-click connect**
- Finds and works with workspace records **One-click connect**
- Finds and works with workspace records **One-click connect**
- Reads your policies and past answers **One-click connect**
- Reads your policies and runbooks **One-click connect**
- Finds and works with workspace records **One-click connect**
- Finds and works with workspace records **One-click connect**
- Finds tickets as evidence; opens new ones when you allow **One-click connect**
- Reads and updates tasks **One-click connect**
- Reads and updates tasks **One-click connect**
- Reads and updates support records **One-click connect**
- Reads and updates support records **Needs a one-time setup**
- Finds reviews, branch rules and change history **One-click connect**
- Works with repository records **One-click connect**
- Reads the threads where questions arrive **One-click connect**
- Reads schedules and meeting details **One-click connect**
- Drafts replies to buyers and vendors **One-click connect**
- Reads mail and drafts replies **One-click connect**
- Works with envelopes and signatures **Needs a one-time setup**
- Works with forms and signed documents **Connect with your key**
- Works with forms and signed documents **One-click connect**
- Reads controls and compliance evidence **Bring your own MCP / OpenAPI**
- Reviews controls, risks and evidence **Bring your own MCP / OpenAPI**
- Reads and updates compliance records **Bring your own MCP / OpenAPI**
- Works with compliance automation records **Bring your own MCP / OpenAPI**
- [Any MCP server or OpenAPI tool](https://lughlabs.ai/docs/connectors)

Trademarks belong to their owners. Availability varies by deployment.