Agentic compliance
Map once. Comply many. Run easy.
Our agents map every compliance obligation your company carries and do the work, from your first certificate or audit report to a complete GRC program.
ISO 27001 · SOC 2 · TISAX® · NIS2 · DORA · CRA · EU AI Act · ISO 42001 · GDPR
TWork
Overview
Frameworks
Tasks
Gap Audit
Questionnaires
Compliance
Evidence
Policies
Risks
Assets
Access Reviews
Vendors
Manage
Connections
Reports
Settings
Acme Inc.
Agent Control
Evidence Agent
Queued
Microsoft Entra ID · MFA report
Gap Audit Agent
Queued
Weekly run · ISO 27001:2022
Policy Agent
Queued
AI governance policy
Questionnaire Agent
Queued
Customer security review
Agent details
Select an agent to see its work.
Gap Audit AgentISO 27001:2022
A.5.15 Access controlPolicy and Entra ID roles match
MetA.5.18 Access rightsQuarterly access review overdue
GapFix readyReview prepared from Entra ID, sent to team leads
A.8.13 Information backupNo restore test in the last 12 months
GapFix readyRestore test planned, runbook drafted
A.6.3 Awareness training12 people overdue
GapFix readyReminders sent, due within 7 days
TeddyGap Audit Agent
×Can you fix these gaps, or tell me more about them?
Looking at the 3 gaps from today’s audit.
3 gapsWorking
Collecting the findings from the gap audit
Checking evidence and owners
Drafting a fix for each gap
I have a fix for each gap. Want me to show you the solutions?Yes, show meNot now
Yes, show me.
Ask Teddy…
Send
Agents
Agents that do the compliance work, with you in charge
Teddy's agents run the recurring work inside your connected systems. Every output is reviewable, versioned and attributable, built for auditor scrutiny.
Certification Agent
Your path to a first ISO 27001 or SOC 2 Type II, step by step
Gap Audit Agent
A complete gap audit in minutes, daily or weekly
Evidence Agent
Collects evidence on schedules and maps it to every control
Policy Agent
Drafts policies from your real systems, in the languages your teams work in
Certification Agent
Explains what to do next and tracks every open step until the auditor arrives.
Learn more
Gap Audit Agent
Audits your whole company in minutes, daily or weekly, so new gaps surface right away instead of once a year.
Learn more
Evidence Agent
Pulls evidence from your cloud, identity and HR tools and flags anything stale.
Learn more
Policy Agent
Writes policies that match how you actually work, and flags drift.
Learn more
Agent Mission ControlAvailable
Live across this workspace
New mission
ChatTask queueContext
Quick actions
Brief mePriorities before the audit
Run gap auditRecheck controls and evidence
Plan my workBatch the highest-impact tasks
Review AI agentsOwners, grants and kill switches
Run a gap audit on ISO 27001 and tell me what needs me.
Starting the Gap Audit Agent on ISO 27001:2022.
Gap Audit AgentRunningDone
Reading 121 controls
Checking evidence from 6 connected tools
Comparing with last week’s run
2 gaps found. 2 tasks created, 1 needs your approval.Open tasksReview
Ask Teddy, or tell it what to do…Run a gap audit on ISO 27001 and tell me what needs me.
Send
Why not just a chatbot?A chatbot writes documents.
A chatbot writes documents.
It doesn’t get you through the audit.
ChatGPT or Claude can draft a policy set in an afternoon. But they don’t know your systems, contradict themselves from one document to the next and link to no evidence. An audit needs a guided path, and someone who knows what an auditor accepts.
Generic chatbotTeddy
Generic textWritten from your real systems
Documents contradict each otherOne consistent program
No evidenceEvidence linked to every control
You are on your ownA compliance engineer through the audit
How it works
One model of your company. Every regulation mapped onto it.
Describe your company once. Teddy maps every framework that applies and reuses each control and piece of evidence across all of them.
Map once
One company model
Comply many
Multiple frameworks, one control set
Controls
Policies
Evidence
Contracts
Integrations
Connected to the stack you already run
Teddy collects evidence from your cloud, identity, HR and developer tools, so agents work on real data. Missing a system? Teddy offers custom integrations.
FAQ
Questions CISOs ask us
What the agents do, who approves their work and how your data is protected.
What is Teddy?
Teddy is an agentic compliance platform. It builds one model of your company, maps every regulation that applies and runs the recurring work with AI agents: evidence, gap audits, policies, questionnaires and contract reviews.
Which frameworks does Teddy cover?
ISO 27001, SOC 2, TISAX®, NIS2, DORA, CRA, the EU AI Act, ISO 42001 and GDPR, all on one control set. When you add a framework, Teddy starts from the coverage you already have.
What do the agents do on their own?
They collect evidence, run gap audits, draft policies, answer questionnaires and review contracts. Every task is labelled as automated, agent-drafted and human-approved, or yours.
What stays with my team?
Every decision. Scope, risk acceptance, policy approval, answers sent to customers and management sign-off always stay with a named person.
How is Teddy different from a compliance checklist tool?
Checklist tools track the work. Teddy's agents do it. One company model and one control set cover security, privacy, AI and product rules together, so nothing is done twice.
How do you protect my data?
With tenant isolation, encryption in transit and at rest, and a public subprocessor list. Our security page explains every measure in detail.
Do you train AI models on my data?
No. Your data is never used to train models.
Can I see what the agents did?
Yes. Every agent run is recorded in the action log with its inputs, its output and the person who approved it, so auditors can trace each result back to its source.
Can I control what each agent may do?
Yes. You set an owner, the permissions and a kill switch for every agent.
Which systems does Teddy connect to?
Identity providers, cloud platforms, HR systems, code repositories and device management. If a system you run is not on the list, Teddy offers custom integrations.
How does onboarding work?
A compliance engineer sets up your workspace with you, connects your systems and imports your existing documents. The agents start working as soon as the first systems are connected.
Can I switch from another tool?
Yes. Teddy imports your controls, policies and evidence from Vanta, Drata or spreadsheets, and a compliance engineer leads the cutover.
How is Teddy priced?
By how much work the agents take on, from one framework to multi-entity programs. Book a demo and we prepare a quote for your setup.
Do I still need an auditor?
Yes. For ISO 27001, an accredited certification body decides on certification. For SOC 2, a licensed CPA firm issues the report. Teddy prepares the audit package and gives your auditor structured access to the evidence.
How do I get started?
Book a demo. We look at your setup together and show the agents working on your frameworks.