Grounding
Keep the originals
Upload documents and keep the original files available for review.
For compliance teams · In development
Compliance review, with your sources.
Collect originals, inspect evidence and record decisions. We are developing Attestria for the daily work of compliance teams.
Attestria keeps sources and work together. Your team reviews and decides.
Topics for pilot discussions
- TISAX / VDA-ISA
- EcoVadis
- LkSG
- NIS2
- ISO 27001
- BSI
- GDPR / DPA
- Custom formats
Rooted in the ecosystem
- Campus Founders
- TUM Venture Labs
The principle
Evidence, not assertion.
Evidence
Inspect the sources
Read selected evidence in its source context. Check whether the original supports a claim.
Approval
Record decisions
Record your assessment and open questions. Your team decides which claims to approve.
The problem
Evidence requests also reach smaller companies.
LkSG and CSRD requests reported in a 2024 regional IHK survey. Each share refers to respondents in that size group, not all German businesses.
Product
From source document to recorded decision.
Keep originals, evidence, open questions and actions together as you work.
- 01
Collect originals
upload documents
- 02
Inspect sources
check the original
- 03
Link evidence
to a specific question
- 04
Record open questions
make unknowns visible
- 05
Record a decision
assessment and approval
- 06
Track actions
keep the next steps visible
Interactive illustration
From source paragraph to reviewable draft.
Choose an example question to see how a source and answer draft can be presented together for human review.
Fictional examples. Displayed scores are not measured answer reliability.
Incoming question
Do you enforce multi-factor authentication for remote access to systems that process customer data?
Source found ISMS Policy v3.2 · §4.1
Remote access to production systems requires MFA through the central identity provider — mandatory for all employees and contractors.
Grounded draft
The policy requires MFA for remote access to production systems. This excerpt establishes neither technical enforcement nor coverage of every system processing customer data.
Example score 92%
Coverage
Choose a focused review together.
From information security to supply chains: for a pilot, we agree which questions, documents and checks matter to your team.
- TISAX / VDA-ISA Automotive · InfoSec
- EcoVadis Sustainability · SAQ
- LkSG Supply chain · Due diligence
- NIS2 Cybersecurity · EU
Also: ISO 27001 · BSI IT-Grundschutz · GDPR / DPA · Custom formats
Sovereignty
Agree data handling first.
Hosted in Germany. Before company documents are accepted, we agree and check data handling and access for your pilot.
- Hosting
- Germany
- Pilot
- Prepare together
- Access
- Tenants and roles
Next step
Plan a suitable pilot together.
In an initial call, we discuss your workflow. Company documents follow only after the agreed data-handling and quality checks.