Every part of your integrity program,
connected by one system of record.
Risk, conduct, speak-up, programs and data protection share the same people, the same companies and the same audit trail — so nothing has to be reconciled, re-typed or chased.
Find the risks. Own the risks. Close the risks.
ClariAze follows the ISO 31000 process from identification to review: AI helps identify, a clear method scores, and the register makes sure someone is accountable until the risk is treated.
- Three ways to identify: describe a situation, analyse one risk type in depth, or extract risks from contracts and reports.
- One scoring method: likelihood × impact on a 5×5 matrix, Low to Critical, with inherent and residual levels.
- Human decision: AI-proposed risks are accepted or declined by a compliance officer; declines keep their reason.
- Accountable treatment: responsible person, priority, deadline, action plan, actions with progress, evidence and notes.
- Review that happens: weekly to annual review reminders for each owner, and an overdue flag when deadlines pass.
Make the right thing the easy thing.
The registers an anti-bribery and compliance program depends on — built so employees declare in minutes and compliance reviews with full context.
- Gifts & hospitality: given, received or declined; value and currency; public-official flag; company gift limit with warnings.
- Conflicts of interest: financial, personal, family, board and secondary-employment conflicts, with recusal and mitigation.
- Outside business interests: directorships, shareholdings, consultancy — with four built-in risk questions.
- Pre-approvals: ask before you act; the decision and its reason are recorded, and an approved gift is filed with the approval linked.
- Independent review: the compliance team decides, never the declarant; editing a declaration never erases the reviewer's decision.
A channel people trust. A process auditors respect.
Most serious misconduct is found because someone speaks up. ClariAze makes that safe, and turns every report into a documented path to resolution.
- Open to anyone: a public reporting form that needs no account, available from every page of the app.
- Anonymous by design: no name, contact details or network address stored; the audit trail never names the reporter.
- Follow-up without identity: a reference number plus a private tracking key, stored only as a hash.
- Confidential inbox: only the company's compliance team and platform administrators can read reports.
- Cases & CAPA: severity, assignee, due date, investigation notes, corrective actions and a documented outcome.
Run the program. Keep the receipts.
The recurring work of a compliance function, with the evidence produced as a by-product — not as an extra step.
- Policy library & attestations: structured policies and named read-and-acknowledge campaigns with readiness percentages.
- Declaration campaigns: annual conflict or outside-interest confirmations — “nothing to declare” is recorded too.
- Trainings: assign material to every active employee and track completion.
- Third parties: due-diligence reviews, risk ratings, sanctions/PEP screening flag and automatic review cycles.
- Compliance calendar & controls: obligations that roll forward when done, and a control library with periodic test results.
Privacy deadlines you can't afford to miss.
Three registers that turn GDPR-style obligations into a routine: record the incident, answer the request on time, assess the risk before the project starts.
- Breach register: what happened, when, severity and affected records — contained, closed, and whether the regulator was notified.
- Subject requests: access, erasure, rectification, portability and objection, each with a 30-day clock and an overdue flag.
- DPIAs: processing, risks and mitigations, from draft to approval.
What leadership sees. What auditors get.
Every module feeds the same oversight layer — live for management, exportable for the board, provable for the auditor.
Command Center
Open risks and their movement, critical exposure, readiness, overdue items, the risk matrix, deadlines and the latest submissions — scoped to each role.
Compliance report
A board pack for any year: registers, programs, cases, approvals, third parties, obligations, controls, data protection and risk — in Excel or PDF.
Audit trail
Sign-ins, changes, approvals, rejections, downloads and exports — who, what, when and the outcome. Nobody can edit or delete an entry.
The foundation under every module.
Multi-company
One workspace for a group of companies; each company's records, documents and files stay separate.
Three clear roles
Employees, compliance officers (curators) and administrators — each sees only what their role allows.
Tasks & reminders
My Tasks for every employee, in-app notifications for assignments and periodic risk reviews.
Any device
Fully responsive: tables become cards on a phone, and every action stays available.
Built-in guide
Plain-language help for every page, real-life situations, a glossary and troubleshooting — written for first-time users.
Reference numbers
Every declaration, request, report, case, risk and analysis gets a permanent, human-readable reference.
One platform for the whole program.
We'll walk through ClariAze using your own risks, registers and reporting needs.