Integracje
Automatyzacja: W nocy Complass sprawdza, czego brakuje
Konektory pobierają aktualny stan, wewnętrzne przebiegi kontrolne pokazują, co jest udokumentowane, a co nie. Decyzja pozostaje po Waszej stronie.
From a list to continuous evidence
A spreadsheet shows the state on the day of the export. Complass keeps it current and tells you where something does not fit.
Zapisać
Connectors read inventory, vulnerabilities, accounts and settings on a schedule.
Check
Control tests and the rule check run over your state every night.
Cross-read wkrótce
The AI review reads your texts against the requirement.
Decide
You see what is open and decide what happens next.
With Excel and email
- Someone collects lists and follows up by email.
- Missing evidence only shows up when someone reads through.
- Nothing says where a value came from.
Z Complass
- Connectors sync on a schedule, without an export.
- Every night Complass checks what is missing or does not fit.
- Every test shows result, finding and time; tests from connectors also show the source.
What connectors collect
You connect a tool once, then Complass reads it regularly. Open source or commercial, in the cloud or in your network.
Assets and inventory
Devices and systems become assets, with origin and history.
- NetBox
- Snipe-IT
- Microsoft Intune
- Microsoft Defender
- Lansweeper
OT and plants
Inventory from OT monitoring, through a relay script in your network and without an inbound connection.
- Nozomi
- Tenable OT
- Claroty CTD
- Defender for IoT
Vulnerabilities and hardening
Findings from your scanners and hardening checks, assigned per asset.
- Tenable Beta
- Qualys Beta
- Rapid7 Beta
- Greenbone Beta
- Wazuh Beta
- Dependency-Track Beta
Identities and permissions
Accounts, groups and permissions for your access reviews.
- Microsoft Entra ID
- GitHub
- Okta Beta
- Keycloak Beta
Evidence from cloud and code
Settings such as second factor or branch protection, with a traffic light on your requirements. Numbers and settings are stored, no names of people.
- Microsoft 365
- Google Workspace
- AWS
- Azure
- GitHub
- GitLab
Licencje
Purchased and assigned licences per product for your licence reconciliation.
- Microsoft 365
Complass only reads inventory, vulnerabilities, identities and settings. By default, a person reviews new devices first. Beta means: the connector reads and shows your data, but until the test against the real system has passed it changes nothing in Complass automatically and gives no automatic test result.
Control tests: your state, checked every night
A control test does not ask whether a measure is ticked off, but whether your data still backs it. Tests on connector data also run after every sync.
- tests in the catalogue
- 73
- on your data in the portal
- 51
- on data from connectors
- 22
Examples from the portal
- Implemented requirements have evidence
- Critical suppliers have a valid assessment
- Restore was tested in time
- No active accounts of people who have left
Examples from connectors
- MFA is enforced for everyone in the identity provider
- Servers and clients are covered by endpoint protection
- Vulnerability scans are current and cover the systems
- Main branches are protected and changes are reviewed
Stale data or an interrupted connection never gives “Passed”. If a source is missing, the test shows “Not applicable” and says how you can prove the point by hand. Which tests run for you depends on your modules and connections.
Rule check: your entries cross-checked
11 fixed rules run over the catalogue entries and documents of every project each night. This is not AI, and no text leaves the platform.
- Marked as implemented, but without evidence
- Marked as not applicable, but without a reason
- All evidence of an entry has expired
- The responsible person is no longer active
- Document section empty or still sample text
- The same reason appears on many entries
Every hint leads straight to the place. You complete it or dismiss it with a reason, and you export the state as PDF or CSV.
With AI: a second look at your texts wkrótce
Rules see whether something is missing. The AI review also reads what is written there and compares it with the requirement. It gives at most three hints per entry and no overall verdict. Until it is switched on, the rule check runs.
luka
The justification does not answer the requirement.
Mismatch
The statement does not match the details of the evidence.
Unclear
The wording is too vague to check.
| Review tier | What runs | Does data leave the platform? |
|---|---|---|
| Off | No review | Nie |
| Rule check | 11 fixed rules, no AI | Nie |
| AI review wkrótce | Rules plus a language model on selected texts | Yes, after your consent, processed in data centres in the EU |
The tier applies to the whole company. Your administrator switches the AI review on and off and first confirms the details of the data flow.
Asystent AI do wypełniania While you write, it suggests texts and names its sources. Nothing is applied automatically.
Często zadawane pytania
Does this replace the work in an audit?
No. Complass takes the collecting and cross-reading off your hands and shows what is open. You still assess and decide, and so does your auditor.
Does a check change my entries?
No. The rule check and the AI review give hints. You complete a hint or dismiss it with a reason. The status of an entry stays as you set it.
Does Complass analyse who wrote something?
No. Hints belong to the entry, not to the person. There is no analysis per person.
Which texts does the AI review read?
Catalogue entries and document sections of selected frameworks. Data protection and whistleblower protection stay out, as do documents on incidents, complaints and staff. Before sending, Complass replaces email addresses, phone numbers, IP addresses, company and site names and the names of current users with placeholders. That does not catch everything, for example people without an account.
What is included in which package?
Control tests on your data in the portal and the rule check are part of every package. Connectors are included from Professional and can be booked as an add-on module below that. The AI features use the AI quota of your package.
Can I try this in the trial?
Control tests and the rule check, yes. Connectors become available when your subscription starts; a demo shows them with sample data.
See what Complass takes off your hands
In the demo we show you connectors, control tests and the rule check with sample data and work out which tools suit you.