One standard of evidence,
across the portfolio
Each platform owns a discipline and shares a single architecture, so output is
consistent, traceable and defensible wherever it originates.
Find your starting point
Consolidating audit, risk, policy and third parties
CompliShield
Running site audits and issuing the report
Learn more
IIRIS Audit
Establishing one risk position across locations
Learn more
Risk Dashboard
Governing consent and data principal rights
Learn more
DPDP Consent
Monitoring criminal cases and fraud matters
Learn more
IntelliTracker
Tracing assets and land records at scale
Learn more
Asset Tracing
Standardising fraud assessment across desks
Learn more
AI Fraud Assistant
Preserving institutional memory
Learn more
Digi Memoir
Preserving institutional memory
Learn more
Consolidating audit, risk, policy & third parties
Every product shares one architecture — evidence held in one is available to the next.
Governance, Risk & Compliance
Regulatory obligation made measurable, auditable and continuous. The platforms are engaged separately and share one architecture, so evidence held in one is available to the next.
Redefining enterprise GRC
CompliShield
One governance register holding audit, risk, policy and third parties together, with the evidence attached to each.
ISO 27001SOC 2ESG Compliance
Document ControlDays → Hours
CompliShield holds audit, risk, policy and third party oversight in a single register. The consolidated position is therefore continuous, and available on the day an inspection asks for it rather than assembled in response to one.

What it does
- Audit management: The audit lifecycle runs in one place, from planning and execution through to reporting and follow up, with tracking automated and analytics available while the cycle is open.
- Document control: A controlled repository holds every governed document with version control, permissions and automated compliance tracking, so the operative version of a policy is established rather than assumed.
- Risk assessment: Risk is assessed against COSO ERM and ISO 31000, supported by real time monitoring, scenario analysis and a central risk repository.
- ESG and regulatory compliance: Operations are held aligned to ESG criteria and to ISO 9001, ISO 27001, HIPAA, PCI DSS, SOC 2 Type II and FedRAMP.
- Third party compliance: Vendor and partner risk is governed through structured assessment and continuous reporting.
Where it is used
Financial services institutions under frequent regulatory change, healthcare providers holding patient data obligations alongside accreditation, manufacturing groups running multi site audit programmes, technology organisations maintaining several certifications on overlapping cycles, and energy and utilities operators under continuous scrutiny.
Audit operations, end to end
IIRIS Audit
Audit operations from scheduling and fieldwork through to the issued report, on one platform.
100% time reductionWorks offline
One‑click branded PDFConsolidated multi site reporting
The platform generates the audit instrument, carries the auditor through fieldwork online or offline, and issues the finished report from the same record. Preparation and compilation, which ordinarily consume more time than the audit itself, are absorbed by the system.

What it does
- Pre populated audit creation: The audit is created in the portal and generates an Excel instrument already carrying client, site and predefined questions.
- One click report generation: Branded PDF reports assemble observations, remarks, multimedia evidence, headers and footers automatically.
- Offline and online execution: Auditors work through the Excel instrument or the web portal as site conditions require, synchronising on reconnection.
- Consolidated multi site reporting: Findings aggregate across locations into an organisation wide audit position.
Where it is used
Internal audit functions, risk management teams and audit service providers running recurring programmes across many locations, including sites where connectivity is limited.
One risk position, explained
Risk Dashboard
A single risk position across every location, scored, ranked and explainable to the level of its drivers.
Multi tenantRole based access
Explainable scoringGeo boundary monitoring
Alarms, incidents, audit findings and external intelligence are consolidated into one location wise position. Every score decomposes into the factors that produced it, which is what allows it to be acted on and contested.

What it does
- Broad alert ingestion: Alerts arrive from manual entry, spreadsheet and comma separated files, client systems, application programming interfaces and external feeds.
- Explainable risk scoring: Normalisation, enrichment and correlation produce scores by severity, likelihood, impact and recurrence, with drivers exposed.
- Geospatial dashboards: Map views, executive indicators and facility risk views sit alongside a ticket console and self audit console.
- Perimeter intelligence: External events near a site are monitored through geo boundaries, keywords and relevance scoring.
- Operational follow through: Notification, escalation, reporting, export, audit logging and production monitoring complete the cycle.
Where it is used
Corporate security and facility leadership accountable for distributed estates, and group structures requiring entity level separation beneath a consolidated view.
Consent, held as evidence
DPDP Consent Management
Consent and data principal rights managed as a controlled lifecycle, with the evidence retained throughout.
Digital consent captureData principal privacy portal
Policy versioningSLA tracking
The platform establishes, for any individual on any date, what was asked, which notice version applied, what was granted, what was subsequently withdrawn and where that instruction propagated. That reconstruction is the substance of Digital Personal Data Protection Act compliance.

What it does
- Digital consent capture: Consent is captured digitally and governed across its full lifecycle rather than at the point of collection alone.
- Data principal privacy portal: A dedicated portal handles data principal rights and incoming requests.
- Policy versioning and evidence: Policy versions, audit trails and an evidence repository are maintained continuously.
- Rights workflows: Withdrawal, access, correction and erasure each run as a defined workflow with a recorded outcome.
- SLA tracking and reporting: Statutory timelines are tracked, with regulatory reporting and enterprise integration attached.
Where it is used
Organisations processing personal data at scale under the Digital Personal Data Protection Act, particularly where consent has accumulated across several channels over several years.
Financial Crime & Investigation
Investigative capability at institutional scale, evidenced to a standard that withstands challenge. This is the discipline closest to the group’s own practice.
Track intelligently. Know instantly.
IntelliTracker
Command over every criminal case and fraud matter the organisation carries, from registration through closure and recovery.
100% RBI CompliantReal-Time Tracking
FMR 1–4 Auto-ReportsSmart Escalations
2–4 Week Go-Live247 Active Cases98% Compliance
A portfolio of several thousand matters is held as a live, verified position rather than a register of reference numbers. Status is established by attendance and dated, so what the platform reports is what is on the file.
![]()
Status is established, not inherited
📁 The client record
The position as handed over, treated as the starting point rather than the conclusion.
📄 The police file
The position confirmed by a person who has attended and read the file, with the date of verification recorded.
⚖️ The court record
Listing position, next date of action and documents due, taken from the record itself.
Five stages, each with a defined next action
AExecution ready
The order exists and enforcement remains. These are isolated so that recoverable matters are never carried among long horizon cases.
BEvidence completion
A document, statement or certification is outstanding. The specific gap is named against the matter.
CCourt action required
A hearing, filing or appearance is due, with the alert scheduled against the date.
DAdministrative status fix
Progress turns on a correction, transfer, clerical error or jurisdiction question.
EDormant or to be closed
Movement has ceased. These are surfaced deliberately so closure becomes a decision.
Four screens
Portfolio position
Total matters under monitoring, their distribution, and verified against pending verification.
Direction of the matter
Cases filed by the organisation and cases filed against it, held separately throughout, with pending and confirmed closed counts under each.
Stage breakdown
The pending population resolved into the five stages, so queue size is visible before any matter is opened.
Case lookup
Search on the unique IIRIS reference. Returns police station, date of last verification, status per the police file, next steps, next date of action, IIRIS handler and client handler.
Exposure, access and alerts
Exposure is carried throughout
Quantum at risk is shown at portfolio level and sliced by branch or regional office, by direction and by stage, so accountability attaches to a number that is genuinely regional.
Advance alerts
Notification reaches the nominated user one day before a date of action, while intervention remains possible.
Row level access
A user sees only mapped matters. A lookup outside that mapping returns a not authorised response.
RBI FMR module
For banks, Fraud Monitoring Return formats generate from the same case data. For other organisations the module is disabled and does not appear.
Two phases
Phase 1: Verification and monitoring
Every matter is verified, categorised and loaded, after which monitoring is continuous. Capacity extends to 3,000 matters a month, on a six month minimum.
Phase 2: Assisted execution
Engaged matter by matter. Execution ready cases are progressed with field support and law enforcement liaison, which is where recovery is realised.
Where it is used
Banks and non banking financial companies, logistics and delivery operations carrying cash collection exposure, retail and e commerce holding high volumes of low value matters, and manufacturing and infrastructure managing theft, diversion and contractor related complaints.
One request, every jurisdiction
Asset Tracing Automation
Asset and land record intelligence across Indian jurisdictions, gathered and evidenced at scale.
70%+ reduction in manual effortState & UT portals automated
AI OCRMulti‑language matching
A single request clears the State and Union Territory land record portals in parallel. Extraction, transliteration and entity matching are handled by the platform, and every record carries its source and confidence.

What it does
- Centralised search: Records are searched by state, zone, address or name, with search history, saved queries, role based access and multi language support.
- Automated portal coverage: Major State and Union Territory searches and structured extraction execute automatically.
- AI OCR and normalisation: Optical character recognition, normalisation, parallel processing and exception handling hold extraction reliable at volume, with confidence scoring throughout.
- Enterprise grade outputs: Audit trails, application programming interface integration, enterprise security and Excel, comma separated and PDF export.
Where it is used
Investigation and recovery teams, lenders assessing security, law firms conducting asset discovery, and diligence practices where a conclusion must be evidenced rather than asserted.
Your procedure, at every desk
AI Fraud Classification Assistant
Fraud assessment governed by the institution’s own procedure, applied consistently at every desk.
SOP groundedIn‑session document retrieval
Historical case referencesRegulatory format reportingWhite label
Classification, supporting reference and the regulatory return are produced within a single conversation, anchored to the institution’s approved procedure. Consistency between investigators becomes a property of the system rather than of individual recall.

What it does
- Fraud classification support: Guidance is generated from case information and historical patterns, with confidence exposed.
- SOP based intelligence: Output remains anchored to approved institutional protocol.
- In session document retrieval: PDFs, reports and compliance material are retrieved within the conversation.
- Historical case references: Prior analysis and resolution patterns surface at the point of decision.
- Regulatory format reporting: Returns are generated in the required formats through the same flow.
Where it is used
Bank fraud investigation functions, and institutions deploying a white label assistant across multiple entities or workflows.
Institutional Experience
The record an institution keeps of itself.
A visit etched in time
Digi Memoir
Institutional memory captured at the moment it is created and held as a permanent, searchable record.
Audio & Video CaptureScreen Optimised
Defence-Grade SecurityDigital Archives
4K HD Video CaptureLegacy Preservation
What a distinguished visitor says is captured in their own voice and hand, converted into a structured record, and made retrievable by name, date, occasion or organisation for as long as the institution stands.

What it does
- Multi format capture: Video, audio, handwriting or typed entry, selected by the visitor rather than imposed by the system.
- Structured digital records: Each entry becomes a structured record carrying visitor, organisation, occasion and date, alongside display ready content.
- Display anywhere: The same content runs on lobby screens, screensavers, event displays, personal viewers and archives without reformatting.
- Secured and licensed: Licence based authentication, controlled access, local storage, backup and restore, with role based visibility.
- Offline and configurable: Full offline operation for restricted environments, with administrative control of devices, themes, branding and users.
Where it is used
Defence establishments: Public relations centres, military headquarters, officer messes and dignitary guest houses.
Corporate environments: Head office lobbies, training institutions, innovation centres and executive lounges.
Clubs and hospitality: Elite clubs, VIP dining halls and round table auditoriums.
Memorials and museums: War memorials and museums holding veteran and visitor testimony.
Establish fit before you commit
Describe the mandate and we will identify which platform applies. Demonstrations run on your scenario rather than a prepared one.