Know what changed. Prove what you do.
EKOS turns scattered policies, procedures, evidence, and regulations into a connected, searchable, versioned knowledge layer. Then it watches for change, shows what is affected, routes review to the people who own it, and assembles the proof that answers an auditor.
45 CFR §164.312 amended
A watched regulatory source changes. EKOS versions the text and reads what actually changed.
Requirement AC-2 · Account Management
The change lands on a stable requirement identity, so mappings do not dissolve when a source is republished.
Access Control Policy v3
Reviewed relationships connect the requirement to your policy and the procedure that implements it.
Q2 Access Review Export
Evidence stays attached to the exact passages it proves, and goes stale the moment those passages change.
manifest root sha256: 77aa…09bd
The whole chain assembles into a tamper-evident evidence package an auditor can verify.
Illustrative product view · select a stage or let it play
Your documents, checked against the actual rules.
Most compliance tools store documents and hope someone notices a mismatch. EKOS reads your policies and procedures against the operative requirement text, and surfaces the discrepancies with both passages pinned side by side.
It reads the rule, not just the title
EKOS compares your document's language against the operative requirement text, so a policy that says 50 when the rule requires 25 is caught, not filed.
Both passages, side by side
Every discrepancy shows the exact sentence from your document and the exact sentence from the rule, with a plain-language explanation of why it matters.
A person decides
Nothing is marked resolved automatically. Findings go to the review queue, where the right owner confirms, rejects, or requests remediation, and the decision is logged.
Correspondence with the Public Policy
The evaluator quotes both passages, explains the compliance consequence in plain language, and leaves the decision to a person. Nothing is marked resolved automatically.
Five stages, one governed loop.
Most tools stop at storing documents or answering questions. EKOS runs the full loop, so an obligation can be traced from its source to the evidence that answers it.
Ingest
Uploads and connectors converge on one durable, versioned pipeline.
See the capabilitiesUnderstand
Search the exact language, or ask and verify the cited answer.
See the capabilitiesConfirm
People approve the relationships that connect requirements to proof.
See the capabilitiesWatch
Version and regulatory changes become focused, routed worklists.
See the capabilitiesProve
Reviewed evidence assembles into verifiable audit packages.
See the capabilities
Two workspaces. One governed knowledge layer.
Research teams and compliance teams work differently. EKOS gives each a dedicated workspace over the same connected, reviewed knowledge, so an answer in one is evidence in the other.
Find the source. Ask with citations.
A research workspace over your governed document estate. Direct Search returns ranked source passages with no generated prose, and Ask EKOS writes cited answers that refuse when the evidence cannot support a conclusion.
- Ranked source passages, verifiable in place
- Cited synthesis with explicit refusal behavior
- MCP access, so your own agents use the same governed layer
Watch change. Prove the response.
A change and evidence workspace for regulated work. Track supported frameworks, see what a revision affects, route review to owners, and assemble reviewed proof into verifiable evidence packages.
- Requirement-level coverage with explicit gaps
- Explainable blast radius for every material change
- Hash-chained evidence packages with a readable binder
Two ways to trust an answer.
When the exact wording matters.
Direct Search returns ranked source passages, not generated prose. Hybrid retrieval finds the concept even when documents use different words, and every result opens into its dossier.
Direct Search, documentedDifferent words, same concept. Both results are source passages: no generated text sits between the reader and the record.
When you need the synthesis, and the receipts.
Ask EKOS writes a synthesized answer from numbered passages and keeps each citation one click from its source. When the evidence cannot support a conclusion, it refuses and says why.
Ask EKOS, documentedCan contractors access production systems?
Contractors may access production systems only through a sponsored, time-boxed account approved by the system owner[1] and are excluded from standing administrative roles[2].
No supporting evidence, or evidence blocked from the configured model? Ask EKOS refuses and says why, so a refusal is a signal, not a shrug.
AI output here is a reviewable claim, not an assertion.
EKOS is not a chatbot bolted onto a document pile. It is the provenance, change-intelligence, and evidence layer underneath regulated work.
Sources first
Search returns the record itself, and every generated answer carries numbered citations back to the passages it used.
Humans govern the graph
Consequential relationship proposals wait for a reviewer, and conflict or supersession calls always require a person.
Knowledge stays scoped
Tenant, organization, and corpus boundaries are applied server-side across Search, Ask, the graph, and MCP.
History you can check
Documents version instead of overwriting, evidence goes stale when its source changes, and audit records are tamper-evident.
The State of Iowa runs on EKOS.
EKOS powers the search and knowledge layer behind Iowa's public policies platform. The same governed retrieval, citations, and tenant isolation that serve a state government are what your organization would run on.
Live public deployment, with EKOS as the governed knowledge layer.
One platform, strict customer separation, verified identity, and auditable decisions.
Bring your policies, procedures, controls, and evidence into the same governed layer.
Built for organizations that answer to regulators.
Financial services
Track FINRA rulebook and notice sources beside Federal Register activity, and keep supervision procedures mapped to the obligations they serve.
Healthcare
Version the eCFR sections your privacy and security program tracks, and keep policies, procedures, and evidence connected to the operative text.
Government contractors
Work from stable NIST control identities imported from OSCAL catalogs, with documented, requirement-level coverage and explicit gaps.
Regulated enterprises
Give legal, risk, security, and operations one governed knowledge layer with access shaped by organization and corpus.
EKOS shows documented coverage and reviewed evidence relationships. It supports deployment-specific compliance programs and does not, by itself, make an organization compliant with any law or framework.
See your own documents become a trail of proof.
A working session with the EKOS team: bring a policy set, a framework, and a hard question. We will walk the loop end to end.