AI Insights
AI Insights is a running analysis of your whole workspace: it surfaces what needs attention and links you straight to the page to fix it. Open it from AI Insights in the Overview group.
Automated findings (no credits)
Section titled “Automated findings (no credits)”The core analysis is deterministic — it runs on your live data and uses no AI credits. It reads your controls, policies, vendors, evidence, reviews, and incidents and produces findings across these areas:
- Framework readiness — per-framework coverage and the number of gaps still to close.
- Policies — missing, unapproved, or overdue-for-review policies, and possible duplicates.
- Vendors — third parties due for review.
- Evidence — stale or expiring artifacts.
- Access reviews — reviews left open past their window.
- Incidents — open security incidents.
- Framework crossover — where work on one framework carries over to another.
Every finding carries a severity — Critical, High, Medium, or Low — and, where relevant, a one-click action link. Summary tiles count findings by severity. When there’s not enough in the workspace yet, Insights tells you what to add (a framework, a policy, a vendor) to start surfacing gaps.
Deep analysis (premium, uses credits)
Section titled “Deep analysis (premium, uses credits)”Where it’s enabled for your workspace, Deep analysis runs a premium AI pass over everything above to produce a board-ready narrative, likely duplicate or contradictory policies, and a prioritized 30-day plan. It uses AI credits (the automated findings above never do), and — like every AI tool — it needs AI configured and enabled for the workspace, and isn’t available to auditor (read-only) roles. If you don’t see the Deep analysis card, it isn’t switched on for your workspace yet; the automated findings still run.
Next steps
Section titled “Next steps”- AI tools & credits: how credit-metered AI features work.
- Get certified: turn findings into your certification path.