AskAI and Radar
AI that drafts from your records, and a view of what attackers can see.
AI assistance grounded in your data
Ask about your control environment and get an answer drawn from your own records: controls, registers, policies and your knowledge base. It cites what it drew on, so an answer can be checked rather than believed.
Key capabilities
- Answers grounded in your own records
- Scoped to what the asking user may see
- Cites its sources
- Switchable off at organisation level
Where AI deliberately is not
Three surfaces have no AI, on purpose: the operator console, the supplier portal and the public self-assessment. On all three a generated answer is the wrong thing, so Certifyi does not offer one. Where AI does appear, it drafts and never saves.
Key capabilities
- No AI in the supplier portal
- No AI in the public self-assessment
- Drafts only: a person always submits
- Duplicate check before anything new is drafted
Certifyi Radar: attack surface discovery
Radar looks at your organisation from the outside in: reachable hosts, the stack they appear to run, and the shadow IT that appeared without going through anybody. Findings convert into vulnerabilities or risks with the link preserved.
Key capabilities
- External attack-surface discovery
- Technology stack fingerprinting
- Shadow-IT detection
- Scheduled rescanning
- Conversion into vulnerabilities and risks
Proof point
Where AI appears, it drafts and never saves. Every field stays editable and a person submits it, because the submitter is the author of record. That is what keeps a register evidence rather than model output.
Questions about this module
Does AskAI send our data to a public model?
AskAI runs as a service inside the platform with access scoped to your deployment and your role. Ask us for the current model and data-handling details for your region during the consultation.
Can AskAI change controls or evidence?
No. It reads and drafts. All changes to the record are made by people and logged in the audit trail.
What does Radar watch?
Vulnerability advisories matched to your assets, configuration drift against baselines, vendor status changes and control trends across the period.