One platform.
Shaped to your sector and your programme.
ClariAze is configured around the risks and obligations you actually face — whether you answer to a financial supervisor, a licensing authority or a public audit office.
Built for regulated work.
Financial services
Banks, insurers, payment and investment firms operate under close supervisory scrutiny, where conduct, conflicts and operational resilience are examined as closely as the balance sheet.
- Conflicts of interest in lending, trading and procurement decisions
- Gifts and hospitality from clients, brokers and vendors
- Outsourcing and third-party concentration risk
- Operational and technology risk in fast product launches
- Speak-up channels that staff genuinely trust
- Conflict-of-interest and outside-interest registers with annual declaration campaigns
- Gift register with company limits, pre-approvals and public-official flags
- Third-party due diligence with risk ratings and review cycles
- AI risk analysis for new products, migrations and vendor contracts
- Anonymous whistleblowing with tracking keys and investigation cases
Energy & utilities
Large capital projects, licences and contractor networks bring bribery, safety and supply-chain exposure — often in dealings with public officials.
- Interactions with public officials and state bodies
- Contractors and agents acting on the company's behalf
- Regulatory filings and licence conditions with hard deadlines
- Health, safety and environmental risk across sites
- Control effectiveness across a dispersed organisation
- Gift declarations with mandatory flags when a public official is involved
- Third-party register with due-diligence reviews and sanctions/PEP screening flag
- Compliance calendar for filings and licence obligations that roll forward
- Risk types for Health & Safety, Environmental and Physical Security
- Control library with periodic testing and remediation tracking
Public sector
Agencies and state-owned enterprises are expected to demonstrate integrity, fair procurement and protected reporting — to regulators, auditors and the public.
- Procurement conflicts and undeclared outside interests
- Gifts and hospitality offered to officials
- Protecting whistleblowers and their identity
- Evidence of policy awareness across large workforces
- Transparent reporting to oversight bodies
- Declaration campaigns that record “nothing to declare” as evidence
- Pre-approvals before accepting hospitality, with recorded decisions
- Anonymous reporting that stores no identity or network address
- Attestation campaigns with named acknowledgements and readiness
- Year-by-year compliance report in Excel or PDF
Healthcare
Hospitals, clinics and life-science companies handle sensitive patient data and complex relationships with suppliers and professionals.
- Health data breaches and subject-access requests
- Industry payments and hospitality to professionals
- Supplier and distributor due diligence
- Professional conflicts of interest
- Clinical and operational risk
- Breach register, 30-day subject-request clock and DPIAs
- Gift and conflict registers with independent compliance review
- Third-party reviews with automatic re-review cycles
- AI risk analysis that treats health data as a classification
- Risk register with owners, actions and evidence
Manufacturing & industrial
Multi-site operations and global supply chains need consistent controls, supplier due diligence and a way to hear problems early.
- Supplier and distributor integrity across countries
- Export dealings, agents and intermediaries
- Control consistency between sites
- Safety and environmental incidents
- Reaching workers who are not at a desk
- Third-party register with ratings, screening flag and review history
- Controls library with quarterly or annual tests and findings
- Supply Chain and Health & Safety risk types for focused analysis
- Speak-up channel that works on any phone, without an account
- Compliance calendar for recurring obligations
Technology
Product teams ship fast; data protection, vendor dependency and AI-system risks have to keep up without slowing them down.
- Personal data in products and test environments
- Dependency on cloud and AI vendors
- Security incidents and breach notification
- Risk assessment for launches and migrations
- Evidence for customers' security questionnaires
- AI risk analysis of a launch or migration in about a minute
- Document analysis of vendor contracts and DPAs
- Breach register with regulator-notification flag and DPIAs
- Technology & Cybersecurity risk type with tailored questions
- Audit trail and compliance report as evidence
Complete programmes, not isolated tools.
Each of these programmes is a combination of ClariAze modules that already work together.
Anti-bribery programme
The operational core of an ISO 37001-style anti-bribery management system — declarations, approvals, due diligence, awareness, reporting and investigation — in one place.
ISO 37001 coverage- Gifts, hospitality & donations — declared, reviewed, with company limits and public-official flags
- Pre-approvals for high-value or sensitive benefits
- Due diligence on third parties, with ratings and review cycles
- Policy attestations and training as named evidence
- Raising concerns and investigations through the speak-up channel and cases
- Anti-bribery policy in the built-in policy library
Whistleblowing compliance
A reporting channel designed around the principles of ISO 37002 and the EU Whistleblowing Directive: accessible, confidential, anonymous if wished, and followed up.
ISO 37002 coverage- Accessible to anyone — employees, contractors, suppliers — without an account
- Anonymity by design — no identity, contact details or network address stored
- Follow-up — reference number and private tracking key show the report's status
- Need-to-know access — only the company's compliance team and administrators
- Documented handling — investigation cases, notes, corrective actions, outcomes
Enterprise risk management
An ISO 31000 / COSO ERM practice that people actually use — because identifying a risk takes a minute and owning it is built into their task list.
ISO 31000 coverage- Identification — AI analysis by situation, risk type or document
- Analysis & evaluation — likelihood × impact, Low to Critical, inherent and residual
- Treatment — owners, deadlines, action plans and tracked actions
- Monitoring & review — periodic review reminders and overdue flags
- Recording & reporting — audit trail, Command Center and annual report
Data protection
The records a privacy function is asked for first — kept current, with the deadlines built in.
GDPR coverage- Breach register — severity, affected records, containment, regulator notification
- Data subject requests — five request types, each with a 30-day clock
- DPIAs — processing, risks, mitigations, approval
- Data & privacy as a whistleblowing category and a risk type
Let's map ClariAze to your programme.
Tell us what you are accountable for, and we'll show you how ClariAze covers it.