Source found ISMS Policy v3.2 · §4.1
Remote access to production systems requires MFA through the central identity provider — mandatory for all employees and contractors.
Product
Bring documents, evidence and decisions together.
Keep originals, inspect sources and track open questions and actions. Pilot preparation lets us check this workflow with your team.
Status quo
Today this is done by hand.
Documents and previous answers often sit in different places.
These figures show LkSG and CSRD requests in a 2024 regional IHK survey, by company size. They do not measure time saved with Attestria.
Workflow
Six steps for your review.
Your team carries out the review. Attestria keeps the documents, evidence and decisions together.
01 · Originals
Collect originals
Upload documents. The original files remain available for review.
02 · Sources
Inspect sources
Read relevant passages with their source. Check the content and context.
03 · Evidence
Link evidence
Link selected evidence to your question or action.
04 · Questions
Record open questions
Record what the documents do not settle and what needs follow-up.
05 · Review
Record a decision
Record your review and decide which claim to approve.
06 · Actions
Track actions
Record actions and their status so open issues can be followed up.
Interactive illustration
From source paragraph to reviewable draft.
Choose an example question to see how a source and answer draft can be presented together for human review.
Fictional examples. Displayed scores are not measured answer reliability.
Incoming question
Do you enforce multi-factor authentication for remote access to systems that process customer data?
Grounded draft
The policy requires MFA for remote access to production systems. This excerpt establishes neither technical enforcement nor coverage of every system processing customer data.
Example score 92%
For your review
Inspect the evidence. Record the decision.
A source may support a claim. Your team judges whether it is sufficient for the specific question.
Originals
Original files are retained and can be downloaded again for review.
Citations
Source references make selected evidence available for human review.
Assessments
Assessments support review. They do not guarantee that an answer is correct or complete.
Hosting and AI region
Hosted in Germany. Mistral inference is planned for EU and EFTA countries. The processing terms are agreed and checked before customer use.
Human in the loop
Your team reviews the answer and decides what to approve.
Pilot validation
We test the workflow with fictional cases and are preparing a focused pilot. Customer validation is still ahead.
Next step
Plan a suitable pilot together.
In an initial call, we discuss your workflow. Company documents follow only after the agreed data-handling and quality checks.