The question arrives late.

Someone asks who approved a supplier two years ago. It might be a supervisor, a customer, an auditor or your board. The person who approved it has changed roles. The reasoning sat in an email thread. The spreadsheet has eleven versions.

Nobody did anything wrong. The work was done. It just left no proof behind.

More documents did not fix this.

Compliance has spent years producing documents: policies, questionnaires, assessments and reports. They show what a company says it does. They rarely show who made a specific decision, under which mandate, on which facts, and how old those facts were.

That gap is the problem. It is also the question that matters most when something goes wrong.

AI can make it worse.

If machines do more of the work and fewer people can say who actually decided, the problem grows. A polished answer with no owner is more dangerous than a rough one with a name on it.

So we built it the other way round.

AI does the compliance work. A named person makes every decision, and every decision is proven. The AI reads, checks, drafts and flags. It refuses to guess when a fact is missing. A person decides, and that decision leaves a receipt you can check without asking us.

Two years later, someone asks why. You show them.