Novalis: AI for compliance questionnaires
Answer compliance questions. With evidence.
Novalis drafts questionnaires, DDQs and audit requests from your own directives, policies and reports. Every statement carries its source, and every answer is approved by your team.
- Answers only from your documents
- Sources down to page and section
- Cloud, Azure or fully on-premise
Product overview
60–90 s · Questionnaire in, evidenced answers out · muted with subtitles
Why Novalis
A system that knows your documents.
Novalis reads your synchronized documents, finds the evidence in them and composes answers from it. Every step stays traceable, and Novalis does not make answers up.
Why not just load the documents into an AI chat?
Thousands of documents
Searches your entire collection, not a handful of files.
A Swiss solution
Your data stays in Switzerland. Never used for training.
A source for every statement
File, page and section, linked directly.
A traceable process
Assignments, changes and submissions are logged.
Reviewed answers stay
Approved, stored with an audit trail and reusable.
Built for teams
The workflow is designed for working together as a team.
Use case 1 · Questionnaires
From a blank questionnaire to a reviewed draft.
Upload the questionnaire as it arrived. Novalis returns it in the same format, completed and approved.
01
Upload
Excel or Word in the original format. Map the columns once.
02
Choose a knowledge base
Define which documents answers may be drawn from.
03
Assign
Distribute questions with deadlines to the responsible specialists.
04
Generate drafts
Novalis writes an evidenced draft answer for every question.
05
Review & approve
The responsible person confirms. Only then does the answer count.
06
Export
The questionnaire comes back in its original format. No reformatting.
A questionnaire from start to finish
30–45 s screen recording · Upload → mapping → drafts → export in the original format
Mandatory approval
A draft only counts once it is confirmed. After that, it is locked.
Role-based access
Answers only from documents the person is allowed to see.
Audit trail
Every change is logged and available to internal audit.
Consistency
Approved answers are reused.
Use case 2 · Chat
Ask your documents.
Beyond questionnaires: anyone who needs to look up a rule asks in natural language and receives an evidenced answer.
Sources inside the answer: one click leads to the passage.
Honest about gaps: no basis, no answer.
Always current: changed documents are searchable within minutes.
Traceable: every conversation is kept.
Within what period do we have to report a data breach?
Breaches that are likely to result in a high risk are reported to the FDPIC as soon as possible.1 Internally, notification to the Privacy Office is required within 24 hours.2
- 1Data Protection Directive.pdf, p. 7, section 4.2
- 2Incident Response Plan v3.docx, p. 3, section 2.1
What is our cyber insurance coverage limit?
The approved documents contain no information on this. Please contact the responsible department.
Operation & deployment
You decide where your data is processed.
One platform, three locations. You choose where Novalis runs and where the answers are composed. Novalis synchronizes with SharePoint or your folders, reads more than 25 file formats, and checks every document for hidden instructions before ingesting it.
Overview
Overview
One data flow, five options.
Choose where Novalis runs and where the answers are composed. Only the knowledge base is fixed.
In every option
- Your own instance, not a shared platform
- Processing in your environment or in Switzerland
- Permissions per knowledge base, approval and audit trail
The language model used can be exchanged to suit your requirements.
Security
Built for organizations that have to provide evidence.
ISO/IEC 27001
Certification planned, target: third quarter of 2027.
Swiss Data Protection Act (FADP)
Technical and organizational measures following the guidelines of the FDPIC.
Law firms
Client onboarding, due diligence questions and internal guidelines.
Asset managers
DDQs from investors and investment consultants, consistent across every round.
Insurers & banks
Vendor, security and supervisory questionnaires in high volume.
Frequently asked questions
What compliance teams want to know first.
Are our data used to train AI models?
No. Your documents serve only as the source for answers. In on-premise operation, they never leave your infrastructure.
What happens when Novalis finds no answer?
Novalis marks the question as not supported by the documents instead of inventing an answer. The specialist completes it manually.
Which formats are supported?
More than 25 file formats, including PDF, Word, Excel and PowerPoint. Questionnaires are returned in their original format.
How long does the rollout take?
After a joint workshop, we set up a test environment and accompany your team through onboarding.
Does Novalis replace our compliance team?
No. Novalis does the groundwork. Every answer is reviewed and approved by a responsible person.
See Novalis with your own questionnaire.
In a 30-minute demo, we show how Novalis handles one of your questionnaires.