compliance-advisory

compliance-advisory is a grounded RAG and agentic assistant and control mapper for Compliance, Risk, and CISO teams at APAC banks. It operates over a knowledge base of MAS, HKMA, APRA, and FSA regulations plus cross-jurisdiction cloud and AI guidance. It is built ports-and-adapters on the Gemini Enterprise Agent Platform and pinned to asia-southeast1 for data residency.

Control mapping is a module of the service. It reads the bank's live GCP control posture from Security Command Center, Cloud Asset Inventory, and Assured Workloads, and evidences coverage against the same requirement text the assistant cites. Horizon scanning is also a module; it reuses the same corpus and freshness ledger to detect republished, re-versioned, new, or withdrawn instruments.

Every artifact carries regulator-grade provenance including regulator, jurisdiction, document, version, and page. The materiality score, band, applicability, and owner are computed and audited before the model is called; the model only writes the rationale. The repository describes itself as a reference build not affiliated with, endorsed by, or sponsored by Google, and warns not to deploy against live regulated workloads without legal, security, and model-risk sign-off.