Better decisions, better outcomes — with the AI you already trust
Most risk platforms race to automate the work away. We take the opposite view — the hard part was never the work, it's the judgement behind it. Connect the AI you already trust, and make that judgement sharper.
Better decisions, not just faster work
The decisions you live with longest are the authoring ones — how a control is written, how a risk is framed. Get them right and the benefit compounds for years. This is where your AI earns its place.
Controls that are real — and easy to prove
Implementing ISO 27001, SOC 2, or PCI DSS turns dozens of requirements into controls. Two judgements decide whether that work saves you effort later or creates it — and neither is obvious the first time through.
New to a standard, you can't yet tell an adequate control from a thin one — that judgement usually comes from audits you haven't had yet. An AI that knows the framework is a second opinion on whether a control genuinely meets the requirement, before an auditor is the one who tells you it doesn't.
A control that's genuinely operating but awkward to prove costs you at every assessment. Shape it so the evidence falls out of the work itself — a dated record, a sign-off, a log — and you stop reconstructing proof after the fact. That design choice, made once, pays back for years. This is where the saving really comes from.
Pressure-testing risk statements
Ask your AI to challenge a risk: is this a cause, an event, or a consequence? Specific enough to act on, general enough to last? Better-worded risks score more honestly and survive longer than the quarter that prompted them.
Drafting the board narrative
Give your AI live risk data and ask for a first-draft summary — what changed, what's outside appetite, what needs a decision. You edit and sign off. The blank page disappears; the accountability stays exactly where it was.
Your model, not ours
Augmentation only works if the model is one you already trust — so RiskQuilt doesn't ship an AI of its own. You connect the tool your organisation has already chosen and approved, and your existing data-handling terms carry straight through.
Because the connection is built on MCP — the open standard the AI industry is converging on for linking tools to live data — support expands as more tools adopt it, with no work on your side. We never lock you to a vendor, because the standard isn't ours to own.
We never see your AI conversations
When you connect an AI tool, your data flows directly between that tool and RiskQuilt. We provide structured access to your data; your AI provider processes it. We never see the prompts you send, the responses you get, or the analysis your AI produces.
This isn't a privacy policy — it's an architecture decision. There is no RiskQuilt AI to send your data to.
Skip this if you just want it to work. If you're the person who has to sign it off:
- No secrets to manage Connections use the public-client OAuth pattern with PKCE and dynamic client registration — there's no client secret to store, rotate, or leak.
- Scoped to a real user An AI connection is bound to a user's own identity and inherits that user's permissions. It can only read or write what that person could, enforced by the same role-based access control as the rest of the platform.
- Least privilege by default Because access follows the user, the AI sees exactly their slice of the data — there's no broad service credential sitting over everything.
- Independently tested The MCP surface was specifically included in the scope of independent pre-launch penetration testing.
- Isolated per environment The authorisation server runs per environment, not shared across them.
And it handles the tedious part too
Not every job is a judgement call. Moving years of risk data out of spreadsheets is mostly tedium — exactly the kind of work AI should take off your hands. Use your connected AI and our prompt guide to restructure messy Excel into the format RiskQuilt's import tool expects, and you're up and running in minutes instead of weeks.
Every eligible tier includes free AI integration for the first month — enough to migrate, classify, and clean up your data before you decide whether to keep it on as an add-on.