AI assistant

A draft to start from,
never the last word.

An optional assistant that drafts a policy, suggests how a control maps, or summarizes a set of findings — and then waits for you to review and insert it. You can switch it off for the whole workspace, and nothing leaves your workspace unless you trigger it. You stay the author; it just gives you a head start.

Start for freeBook a conversation
++++
app.devguard.ch / assistant
Optional
What it does
Draft policies
Map controls
Summarize findings
Switch off any time
EU-hosted (AWS Bedrock, eu-central-1). Nothing is sent unless you trigger it; no training on your data.
Draft an access control policy for ISO 27001 A.5.15.
Here's a draft mapped to A.5.15. Review and insert when ready:
Access Control Policy
· Access granted on least-privilege
· MFA required for all roles
· Quarterly access reviews
InsertRegeneratemaps to A.5.15
Ask the assistant…ready
Every framework
ISO/IEC 27001ISO/IEC 27002SOC 2SOC 1GDPRHIPAAPCI DSS v4.0.1NIST CSF 2.0EU AI ActNIS2 DirectiveDORAOWASPISO/IEC 42001CIS ControlsCloud Controls MatrixISO/IEC 27017 & 27018ISO/IEC 27701ISO 9001ISO 14001ISO 45001Swiss nFADP
ISO/IEC 27001ISO/IEC 27002SOC 2SOC 1GDPRHIPAAPCI DSS v4.0.1NIST CSF 2.0EU AI ActNIS2 DirectiveDORAOWASPISO/IEC 42001CIS ControlsCloud Controls MatrixISO/IEC 27017 & 27018ISO/IEC 27701ISO 9001ISO 14001ISO 45001Swiss nFADP
ISO/IEC 27001ISO/IEC 27002SOC 2SOC 1GDPRHIPAAPCI DSS v4.0.1NIST CSF 2.0EU AI ActNIS2 DirectiveDORAOWASPISO/IEC 42001CIS ControlsCloud Controls MatrixISO/IEC 27017 & 27018ISO/IEC 27701ISO 9001ISO 14001ISO 45001Swiss nFADP
ISO/IEC 27001ISO/IEC 27002SOC 2SOC 1GDPRHIPAAPCI DSS v4.0.1NIST CSF 2.0EU AI ActNIS2 DirectiveDORAOWASPISO/IEC 42001CIS ControlsCloud Controls MatrixISO/IEC 27017 & 27018ISO/IEC 27701ISO 9001ISO 14001ISO 45001Swiss nFADP
  • ISO/IEC 27001
  • ISO/IEC 27002
  • SOC 2
  • SOC 1
  • GDPR
  • HIPAA
  • PCI DSS v4.0.1
  • NIST CSF 2.0
  • EU AI Act
  • NIS2 Directive
  • DORA
  • OWASP
  • ISO/IEC 42001
  • CIS Controls
  • Cloud Controls Matrix
  • ISO/IEC 27017 & 27018
  • ISO/IEC 27701
  • ISO 9001
  • ISO 14001
  • ISO 45001
  • Swiss nFADP
How it works

You ask, review, insert.

The assistant is optional and switchable off — ask, read the draft, and nothing lands in your workspace until you insert it.

01

Ask it, or switch it off

The assistant is there from the start, and you can switch it off for the whole workspace in your settings. When you ask it something, like drafting a policy for a control or summarizing this quarter’s findings, it works only on that request, only when you trigger it.

Switchable off, EU-hosted

It runs on AWS Bedrock in eu-central-1 (Frankfurt), so AI requests stay inside the EU while the rest of your workspace stays Swiss-hosted, nothing is sent unless you trigger a request, and your data is never used to train a model.

02

Read the draft, not a black box

It returns a draft with the control it maps to shown alongside, so you can see what it’s claiming before you accept anything. Regenerate it, edit it, or discard it.

03

Insert when you’re ready

Nothing lands in your workspace until you press insert. The draft becomes a policy, a mapping or a summary that you own and can edit — and it can act on your workspace through tools only on the request you gave it.

Why it’s built this way

Built so you can prove what it touched.

Four choices behind how the assistant works here — each one something you can check, not an adjective.

01

Optional, and switchable off

The assistant is available from the start and you can switch it off for the whole workspace in your settings. It does nothing until someone asks it something, so it is never working without your knowledge.

02

EU-hosted on Bedrock, eu-central-1

Requests run on AWS Bedrock in the eu-central-1 (Frankfurt) region, so AI requests stay inside the EU while the rest of your workspace stays Swiss-hosted.

03

No training on your data

Your policies, findings and prompts are not used to train any model, and nothing is sent for a request you didn’t trigger.

04

It drafts; you review and insert

The assistant produces a draft and shows the control it maps to; nothing enters your workspace until you insert it, so the author of record is always you.

Swiss-hosted, yours to export.

Hosted in Switzerland by default, in German and English, with on-premise possible. Your data and evidence are yours and exportable in full at any time, with no lock-in.

See the full feature comparison

One module of the platform

Where the assistant helps.

The assistant works on the records you already keep, drafting a policy, mapping a control, framing a risk or summarizing what’s due, and hands each one back for you to accept.

policyv1.3
access_control {
require mfa = true
}

Policies

Draft a policy for a control, then review and insert it.

ISO 27001SOC 2GDPRNIST CSF

Frameworks & controls

Get a suggested mapping you confirm, not a guess you inherit.

2.0SCORE

Risks

Summarize a set of findings into a risk you can edit.

JUN
ISO review
in 3 days

Deadlines

Ask what’s due and who owns it, in plain language.

FAQ

The questions evaluators ask.

Is my data used to train AI models?

No. Your policies, findings and the prompts you write are not used to train any model. The assistant uses them only to answer the request you triggered, and nothing is sent for a request you didn’t make.

Is the assistant on by default?

Yes, and you can switch it off for the whole workspace in your settings. Until someone asks it something it does nothing, sends nothing and reads nothing, and nothing it drafts enters your workspace until you insert it.

Where does the assistant run?

On AWS Bedrock in the eu-central-1 (Frankfurt) region, so AI requests stay inside the EU. The rest of your workspace stays Swiss-hosted, and nothing is routed outside the EU unless you’ve configured it that way.

Does it write my policies for me?

No — it drafts, you decide. It returns a draft with the control it maps to shown alongside, and nothing enters your workspace until you review it and press insert. You stay the author of record, which is what an auditor expects.

How is this different from pasting into a general chatbot?

A general chatbot doesn’t know your control set, doesn’t show what a draft maps to, and sends your text to wherever that vendor runs. Here the assistant works on your own records, shows the control behind every suggestion, runs EU-hosted on infrastructure we name, and never trains on your data, and you can switch it off for the whole workspace.

A head start you can always overrule.

Use it when you want a draft, switch it off when you don’t, and insert nothing you haven’t read — EU-hosted, with no training on your data.

Start for freeBook a conversation
Sign in
Start for free
Book a conversationStart for free