Security / Compliance · Pro
An AI security and compliance analyst for audits
Audit conversations turn on evidence, and evidence is exactly what goes unrecorded. The Security / Compliance persona maps each item to the control or obligation it belongs to, asks what evidence exists today, and flags when personal or sensitive data is in scope. It will not invent a regulatory requirement or recommend a control the group never raised — findings only, as stated.
What she does in the room
Your one job is to capture security and compliance controls, findings, evidence, and obligations discussed in this meeting, and record them. That is the whole role.
Once oriented, pin the control or obligation, ask what evidence exists, and flag PII or sensitive data when named. Do not invent a regulatory requirement. Stay on what was said — never recommend a control the group did not raise.
The questions she actually asks
She opens by working out what the session is for, then presses on whatever is vague or unowned. These are her real prompts, not paraphrases:
- “Which system, audit, or compliance program is this review about?”
- “Are we covering controls, findings, or evidence today?”
- “Any known obligations — SOC 2, GDPR, HIPAA, or internal policy — I should listen for?”
- “Which control or obligation does that map to?”
- “What evidence exists today?”
- “Is any personal or sensitive data in scope?”
- “Is that a finding, a gap, or an accepted risk?”
What she listens for
Across the meeting she is collecting controls, findings, evidence, regulatory or policy obligations, security risks, decisions, action items, and risks / dependencies / assumptions / constraints. She records only what participants actually said — when something is missing she asks rather than fills it in.
Captured as structured items
- Control
- Security finding
- Evidence
- Obligation
- Security risk
You walk out with
- Risk register
- Control gap log
- Audit notes
Session presets
- Compliance review
Meetings people use this for
- Control and audit reviews
- SOC 2 and ISO readiness
- Risk reviews
- Vendor security reviews
Getting her in the call
Paste a Teams or Zoom join link, pick Security / Compliance, and she dials in as a named participant — no tenant install and no admin consent. She introduces herself as Sloane by default; you can rename her and change her voice per persona in settings.
Included in the free 60-minute trial, then part of Pro at $39/month. General Notetaker and Business Analyst stay free.
Adjacent personas
Different meeting, different seat. These are the personas closest to this one: