CASK
the agent that shows its sources
CASK (Compliance ASK) is a desktop workspace. Its agent drafts reports, answers questionnaires, and reviews evidence from your files, and every claim cites the file it came from. Nothing changes until you accept it.
Rather we run it? See our servicesBuilt around your control
Your AI. Your data. Our agent.
Bring PDFs, documents, screenshots, and spreadsheets into one workspace. The agent works from what you add there, and every conclusion in the final document is one you accepted.
Your AI. Your data. Your desktop.
CASK stores your workspace on your device. Choose a local AI model or connect your own provider account. A cloud provider receives only the content you ask it to process, under its own terms.
Sources you can check
CASK checks drafts against supporting records and flags missing information. These checks help reduce invented claims and make human review easier.
Human in the loop, always
The agent proposes changes and shows supporting sources. You review, edit, accept, or reject them before they become part of your work.
Connected evidence
Why CASK
A convincing answer still needs evidence.
A model can write a confident answer about a control your organization never had. CASK checks each claim against the records in your workspace and marks the ones it cannot support, so the reviewer starts with the gaps.
- 1DraftDraft
- 2CheckSource check
- 3ReviewReview
User access is reviewed every quarter and signed off by the control owner.
The organization has held SOC 2 Type II certification since 2019.
MFA is enforced for 100% of admin accounts.
- access-review-q2.pdfQuarterly access review, signed
- mfa-policy-v3.docxMFA coverage: 94% of admins
- vendor-register.xlsx42 vendors, risk-rated
The draft is written first. Every claim is checked next.
Hallucination, caught
CASK checks for supporting records and marks gaps for review. You can see where an answer needs more information.
Fabrication, blocked
CASK is designed to reject requests to invent evidence. Its review checks help you identify claims that the records do not support.
Citations, enforced
Source references let you compare a draft with the original record. You decide whether that record supports the conclusion.
Drafts take less time to prepare, and each one arrives with its sources attached. AI still makes mistakes, so a person checks those sources and approves the final work.
FAQ
Before you bring AI into the work.
Anyone who writes or reviews policies, privacy assessments, security questionnaires, or audit evidence. You add the source files, CASK drafts from them, and your team checks the citations and approves the result.
A chat window knows only what you paste into it. In CASK, documents and tables sit in one workspace with the records that support them. The agent proposes an edit, cites the file behind it, and marks an answer as Not Provided when no record supports it. You accept or reject each edit where it sits.
No. CASK uses source checks, visible gaps, and approval steps to reduce unsupported claims and help you catch errors. A citation is a starting point for review. You still need to check whether the source supports the answer.
Your CASK workspace is stored on your device. If you connect a cloud AI provider, the content you ask it to process goes directly to that provider under its terms. You can choose a local model instead. We handle account and diagnostic data separately, as our privacy policy describes.
Yes. Connect your own account with a supported AI provider or use a compatible local model. Choose the option your organization approves for the information you handle.
Cloud AI usage is billed by your chosen provider, separately from your CASK plan. Cost depends on the model, document size, and amount of work. Local models avoid provider usage charges but require suitable hardware. Check the account portal for current CASK plans.
Yes, after review. CASK supports common document and spreadsheet exports so you can share approved work. Check the sources, scope, and completeness first. An auditor or customer still decides whether the evidence meets their requirements.
Yes. Outcome as a Service (OaaS) covers one agreed project, and Compliance as a Service covers recurring work. Our practitioners run CASK on your records. The agent drafts and cites, and a practitioner checks every citation before anything reaches your team. Tell us what you need finished.
No. Add the records you want to work with to your workspace. CASK uses them as context for the task. Truvara does not use your workspace content to train AI models. Review your chosen AI provider's terms before sending it information.