UtilityFree

Compliance Agent

by Appian Corporation

Description

Compliance testing is often periodic sampling—a few cases reviewed after the fact—which lets exceptions sit undetected for weeks.

The Compliance Agent shifts control testing into the flow of work by finding the governing Standard Operating Procedure for each case, evaluating the case against every control, and recording an auditable verdict: it clears compliant cases and flags or blocks exceptions for a human. This brings Appian's compliance and risk analysis / continuous control testing pattern to your case management operations.

  • The agent never resolves a case itself; instead, it produces evidence.
  • Every verdict carries a per-check breakdown (pass/fail/N/A, evidence found, and policy section cited), a plain-language summary, and the SOP version used—all visible within a compliance console.

Common applications include testing IT access requests against provisioning and security controls (authorized approval, least privilege, expiry, identity verification, segregation of duties) and testing facilities work orders against safety controls (hazard screening, Lockout/Tagout and permits, qualified assignee, area safety).

Features

  • SOP-Driven Checks: Looks up the applicable SOP by case type and evaluates each control within it.
  • Three-State Verdict: Clears compliant cases, flags exceptions for review, or blocks high-severity failures, driven by each control's severity and on-fail action.
  • Auditable Evidence: Stores per-check outcomes, evidence, and policy citations directly on the case as structured data.
  • Human-in-the-Loop Exceptions: Routes flagged and blocked cases to the right review queue with full context attached.
  • Graceful Stop: Reports when no SOP applies to a given case type rather than inventing checks.

Resources

  • Compliance Agent Deployment Guide.pdf

    Documentation

    Download
  • Compliance Agent SQL Script.sql

    SQL Script

    Download