The AI agent for compliance analysts

Sauna maps regulations to controls, drafts the monitoring review, assembles the evidence package, and writes the findings memo so each compliance test is documented and exceptions surface before the regulator does.

Get started for free

What it does

What Sauna does for compliance analysts

01
Map rules to controls
Sauna reads the regulation and the control library in Confluence, drafts the requirement-to-control mapping, and flags rules with no control or a control that hasn't been tested this cycle.
02
Run monitoring reviews
It samples transactions or accounts per the testing plan, compares them to policy in Google Sheets, and drafts the exception list with the rule, the sample, and the impact.
03
Assemble evidence
Sauna gathers the screenshots, approvals, and reports for each test from Google Drive, builds the evidence package, and notes any control where the proof is thin.
04
Draft the findings memo
It writes the monitoring findings memo in Google Docs with the issue, root cause, and recommended remediation, and logs each action in Jira for the owner to confirm.

Put Sauna to work on this.

Get started for free

In context

Ask in chat. It does the work.

Sauna shows up where you already work — the web app, Slack, email, iMessage, and Superhuman. It reads what it needs, does the task, and comes back with the draft for your approval.

app.sauna.ai/sauna

You

@Sauna Map the new disclosure rule to our control library, pull a 25-account sample, test it against policy, and draft a findings memo with remediation for any exceptions.

Sauna

Reading Confluence and Google Sheets.

Done — here's the draft and what I found. Approve to send.

Try it

Ask in plain words

The literal prompt for this job. Open it in Sauna and it picks up from there.

“Map the new disclosure rule to our control library, pull a 25-account sample, test it against policy, and draft a findings memo with remediation for any exceptions.”

Example promptRun in Sauna →

Plugs into the tools you already run — and thousands more, or any MCP server.

Confluence Google Sheets Google Drive Jira

Good to know

Questions, answered.

Will it decide whether we're compliant?

No. It runs the test, gathers evidence, and drafts findings, but the compliance conclusion and what gets reported are yours. It shows the sample and the rule behind every exception.

Can it interpret regulations on its own?

It works from the regulation text and your control library and cites the clause behind each mapping. Interpretation and the final position stay with you; it surfaces gaps rather than resolving them silently.