Where the platform is headed next.
Each phase builds on what is already live: first the unified GRC workspace, then deeper automation, then agentic intelligence with human oversight.
Where the platform is headed next.
Each phase is scoped for a 3–6 month delivery window, building on the version before it.
Current Platform
- Dashboard, Governance & Policy Library
- Frameworks, Controls & Evidence Mapping
- Assessments & Audit Management
- Asset, Risk & Incident Registers
- Organisation, Permissions & Workflow Engine
Automation Layer
- Policy document auto-generation
- Framework control auto-mapping
- Compliance gap analysis agent
- Automated evidence collection
- Risk quantification engine
Agentic Intelligence
- Agentic AI assistant
- AI governance as its own risk domain
- Audit-ready reporting
- Joe, the AI compliance assistant
- Automated PDPL compliance
Practical improvements before flashy promises.
The roadmap is shaped around regulated teams that need reliability, clear ownership and defensible audit evidence before adding more automation.
Ship the core workflow first
Controls, risks, assets, assessments, evidence and permissions stay stable as automation gets added.
Remove repetitive work
Policy generation, evidence collection and gap analysis reduce manual effort without hiding the source of each decision.
Keep humans accountable
Agentic workflows accelerate investigation and reporting while named owners still approve the compliance record.
Want to shape what we build next?
Early customers help prioritize the roadmap. Tell us about your frameworks and we will show you where Comply Mug is heading.
Bring every framework, control, owner, and evidence trail into one calm operating rhythm.
See how Comply Mug can map your current obligations and show the gaps that matter most.
