WorkflowCompliance & Ethics

Compliance Investigation Case Management

Compliance investigation case management that builds the cited case file for you

Investigations close in a median of 18 days, every finding cited.

See one case, screen by screen ↓
demo2,318itemson legal hold for one speaker-program case, read for 4 custodians in 14.2 s — 16 kept as exhibits
demo11flaggedof 22 timeline events where another source disagrees, each linked to its exhibit
demo38statementsin the sample draft report, every one cited to an exhibit — 0 uncited
target18daysmedian to close an investigation, against an industry median of 28
In short

What is Compliance Investigation Case Management?

Software that takes an ethics and compliance investigation from the report to a signed report and corrective actions: scope, legal hold, evidence, interviews, findings and sign-off in one case file. Compliance Investigation Case Management adds six agents that collect the evidence, lay it on one cited timeline, plan the interviews from its gaps and draft the report, for the investigator to decide and counsel to sign.

How to choose AI solutions for life sciences →

Updated

The problem

Why an internal investigation takes four weeks to close

A report comes in through Speak Up — a speaker program, a meal over the cap, a sign-in sheet that does not add up. The investigator exports email from the archive, expense reports and receipts, CRM call notes, event records and training records, de-duplicates them, types a chronology into a spreadsheet and writes the interview questions from memory. Most of the cycle is spent gathering and ordering evidence before anyone has been interviewed.

The contradictions hide between systems. The sign-in sheet lives in the event system, the receipt in the expense system and the email asking for a separate bar ticket in the archive, so nobody sees all three on one line. Second interviews follow because a gap was not on the outline, and every sentence of the report has to be checked against its exhibit by hand — a statement without its exhibit does not survive counsel or a regulator.

typical28daysindustry median to close an investigation
typical44–46%of allegations substantiated across the industry — each finding, either way, has to rest on the file
Where an investigation's days goestimated
By hand28 days
With the solution17 days
  • Triage, scope and legal hold2 → 1 d
  • Exporting and de-duplicating email, expense, CRM and event records6 → 1.5 d
  • Building the chronology by hand4 → 0.5 d
  • Weighing each allegation against policy3 → 2 d
  • Planning and holding the interviews8 → 8 d
  • Drafting the report, checking citations, sign-off5 → 4 d

Estimated split for a typical speaker-program case, by hand and with the solution. Interviews still take the time they take.

How it works

How a case moves

Six agents triage the report, collect the evidence, lay it on one timeline, weigh each allegation, plan the interviews from the gaps and draft the report; the investigator decides each finding and counsel signs.

What comes in
Report inSpeak Up report · web, hotline or email
Agents at work
Intake & triage agentcategory, risk, privilege
Then
Evidence collectorunder legal hold
Then
Timeline builderevery event linked to its exhibit
Policy & substantiation analystallegation against clause
Then
Interview plannerquestions that close gaps
Then
Report writerevery statement cited
A person decides
Investigatordecides each finding; counsel signs
What comes out
Signed investigation report
Corrective actions
Cited timeline and exhibit index
One case, step by step

One case, from an anonymous report to a signed report

IC-1042 at Northwind Bio: an anonymous report about Corventa speaker dinners in Atlanta North. High risk, under counsel direction, 4 custodians on legal hold LH-2026-031. Here is what happens next, screen by screen, in the working solution.

  1. 01Day 18

    One case, one timeline, the clock in view

    Lena Ortiz · Senior compliance investigator

    The case bar shows IC-1042 — HCP interactions, US Southeast, subject Ryan Castell, territory manager, counsel Omar Haddad — on day 18, due Nov 2, against an industry median of 28. Report SU-2214 is already on the timeline, its key passages highlighted. Under it, 2,318 items wait on legal hold: 1,684 emails, 412 CRM notes, 96 expense lines, 58 event records, 4 training records and 64 policies.

    SU-2214: “Drinks go on a separate bill so the dinner looks like it is under the limit. I have seen this since spring.”

  2. 02One click

    “Load evidence” — three agents build the case file

    The agents

    The evidence collector reads 2,318 items for 4 custodians and keeps 16 exhibits in 14.2 s. The timeline builder lays 22 events in date order across 6 sources, each linked to the passage it rests on, and flags 11 where sources disagree. The policy analyst lays 5 allegations against 5 policy clauses; its proposals wait for Lena's decision.

    Agents at work on IC-1042 — “read-only · legal hold respected”.

  3. 03Jul 14

    “2 days before the split payment”

    Timeline builder

    Seven lanes — Speak Up, Events, Expenses & payments, Email, CRM, Records & HR, Interviews — and a close-up of the Jul 16 dinner. On Jul 14 Ryan Castell emails the venue coordinator at Lakeline Meeting Services. The timeline builder links that email to the card payment two days later, and the panel opens EX-16 at the highlighted passage.

    EX-16: “Can you ask Bellhaven to put the bar on its own ticket? The dinner has to stay under $125 a head on our side.”

  4. 04Jul 16

    Eight signatures, five covers

    Timeline builder

    Three sources disagree on one night. The sign-in sheet for program SP-26-0716 carries 8 signatures. The Bellhaven Steakhouse receipt shows 5 covers and $1,610.40, including a $488 bar bill, paid in two card transactions — $998.40 at 21:51 and $612.00 at 21:58. ER-55821 claims $998.40 for 8 HCPs, $124.80 a head; ER-55822 files $612.00 as an “office lunch”.

    “Same day, another source disagrees: Program 7 · 8 signatures on the sheet.”

  5. 05A second report

    A named report lands on the same dinner

    Intake & triage agent

    On Oct 6 a practice manager in Marietta reports that Dr. Lund received a thank-you note for the Jul 16 dinner at Bellhaven while she was at a conference in Denver. The intake agent reads SU-2291 in 3.8 s, classifies it HCP interactions, high risk, and matches it to IC-1042 at 91% — same program, same restaurant, an HCP on the sign-in sheet. Lena decides whether to add it to the case as an exhibit.

    “Checked protections — anti-retaliation notice sent to the reporter.”

  6. 06Built from the timeline

    Four interviews, witnesses first, the subject last

    Interview planner

    The interview planner reads 4 gaps on the timeline — who signed for the HCPs who were not there, who approved ER-55822 and why, why needs assessments were waived, whether prescribing drove the add-on programs. It writes 17 questions for 4 people and puts them on the Interviews lane: Alana Pierce on Oct 9, Jess Alvarado on Oct 10, Mia Torrance on Oct 13 and Ryan Castell, the subject, on Oct 14.

    The counsel notice goes on every employee outline — 3 of the 4.

  7. 07Oct 14 outline

    Every question tests an event and shows its exhibit

    Lena Ortiz · Senior compliance investigator

    Ryan Castell's outline has 7 questions grouped by allegation, each with the timeline event it tests, the gap it closes and the exhibit to show — “Jul 14 · Email”, G2, EX-16. The interview opens with the counsel notice. Lena can add a question, send the outline to counsel or record her notes.

    Counsel notice: “I am working with Omar Haddad, who represents Northwind Bio, not you personally. This conversation is privileged; the privilege belongs to the company, which may decide to share it.”

  8. 08Her decision

    She decides each finding; the agent only proposes

    Lena Ortiz · Senior compliance investigator

    Each allegation sits beside its clause of SOP-HCP-014, with evidence for, evidence against and open questions. For A3, meal cap exceeded and split across two reports, the analyst proposes substantiated at 96%: three records agree. Lena marks A1 to A4 substantiated, each recorded in the audit trail with her name. A5, needs assessments skipped for the added programs, was found outside the reported scope, so it goes to Omar Haddad first.

    A3: “Three records agree. The real cost was $322 a head — $985.40 over the cap for 5 people.”

  9. 09Drafted

    38 statements cited, 0 uncited

    Report writer

    The report writer turns the 11 flagged events into the chronology and Lena's decisions — never the proposals — into the findings, then adds the root cause and corrective actions in the house format. Every statement links to its exhibit, and the draft carries the privileged and confidential label. She can edit it or export it to Word.

    The report cannot go to counsel while a statement is uncited or an allegation is still undecided.

  10. 10Signed

    Counsel signs; six corrective actions get owners

    Omar Haddad · Employment counsel

    Lena sends the report to Omar Haddad for sign-off. Once he signs, 6 corrective actions become tasks with owners and due dates — among them recovering the $985.40 over the cap and the $612.00 mis-filed charge with internal audit, correcting the Jul 16 transparency records for every listed HCP who did not attend, and a monitoring rule that flags split charges at one merchant on one day.

    The banner: signed by Omar Haddad — “6 corrective actions created as tasks; the case moved to Remediation.”

Who it’s for

Built for everyone who carries a case.

The same investigation, seen by the five people who work it — in their own words, and what changes.

LO
Lena OrtizSenior compliance investigator · five open cases
Senior compliance investigator
Before
“I spend the first week of every case building a chronology in a spreadsheet.”
Now
Opens a case already on one timeline, every event linked to its exhibit, and spends her time on interviews and findings.
OH
Omar HaddadInvestigations and employment counsel · signs reports
Employment counsel
Before
“Show me the exhibit behind that sentence, or take the sentence out.”
Now
Receives a draft with every statement cited, approves scope changes before they are investigated, and signs.
PR
Priya RamanInternal audit manager · expense analytics and recoveries
Internal audit manager
Before
“Two charges at one restaurant on one night should never pass review.”
Now
Sees the receipt, both expense reports and the card split on one line, and owns the recovery.
SP
Sam PateleDiscovery and data analyst · legal holds
eDiscovery & data analyst
Before
“Every item keeps its custodian and its fingerprint.”
Now
Every exhibit carries its source, custodian, SHA-256 fingerprint and chain of custody, collected read-only under the hold.
DO
Dana OkaforChief compliance officer · reports to the audit committee
Chief compliance officer
Before
“I need to show regulators our investigations are timely and documented.”
Now
Sees cases closed, median days to close against the industry, substantiation and where the days go, by category and region.
Built on the engine

6 agents. Each with one job, and hard limits.

Six agents triage the report, collect the evidence, lay it on one timeline, weigh each allegation, plan the interviews from the gaps and draft the report; the investigator decides each finding and counsel signs.

Intake & triage agent

Reads each Speak Up report from the web form, hotline or email, proposes its category, risk and whether counsel direction is needed, and matches it to open and closed cases.

  • Never reveals a reporter's identity
  • Never routes a report on its own — a person does
  • Low confidence goes to a person
Evidence collector

Collects email, CRM, expense, event, HR and training records for the custodians and dates in scope, under legal hold, and keeps the source, custodian and SHA-256 fingerprint of every item.

  • Never collects outside the case scope
  • EU records stay in the EU region
  • Read-only connections
Timeline builder

Lays one event per fact on the timeline with the passage it rests on, flags dates where sources disagree and links events that belong together.

  • Every event cites its passage
  • Never states an inference as fact
Policy & substantiation analyst

Sets each allegation against its policy clause, lists the evidence for and against with exhibits, names the open gaps and proposes a finding with a confidence.

  • Never records a finding — a person decides
  • Below 70% a proposal is never pre-selected
  • New allegations go to counsel as a scope question
Interview planner

Turns the gaps on the timeline into interview outlines, witnesses first and the subject last; each question names the event it tests and the exhibit to show.

  • The counsel notice opens every employee outline
  • No leading questions to witnesses
Report writer

Drafts the report in the house format — allegations and scope, method, chronology, findings, root cause, corrective actions — from the timeline and the investigator's decisions.

  • Never writes an uncited statement
  • Uses the investigator's decisions, never the proposals, as findings
  • Privileged label when under counsel direction
Investigator

Decides each finding; counsel signs. The agents propose; a named person decides.

Ask in plain words

Ask about any case, in plain words

Ask about a case, an exhibit, a person or a rule. Every answer cites the exhibit it rests on.

Was the split bar bill planned?

It looks planned. On Jul 14 Ryan Castell emailed the venue coordinator: “Can you ask Bellhaven to put the bar on its own ticket? The dinner has to stay under $125 a head.” Two days later the bill was paid in two card transactions seven minutes apart — $998.40 and $612.00 — and filed as two expense reports, one as an “office lunch”. That is what SOP-HCP-014 §6.4 forbids.

What is the strongest evidence for the sign-in sheet allegation?

The receipt and the venue booking put the Jul 16 dinner at 3 or 4 HCPs at most, against 8 signatures: the receipt shows 5 covers including the speaker and the rep, the booking a party of 6. A CRM note the next morning records Dr. Brooks saying she missed it. Still open: who signed for the HCPs who were not there — on Ryan Castell's outline for Oct 14.

How much money is involved?

For Jul 16 alone: the real bill for 5 covers was $1,610.40 against $625.00 allowed at $125 a head — $985.40 over the cap — plus $612.00 mis-filed as an “office lunch”. Speaker fees for the nine programs total $22,500. The recovery action is with Priya Raman, due Oct 31.

Do we need to correct transparency reports?

Yes. The Jul 16 meal was reported at $124.80 for each of 8 HCPs, but the receipt shows room for 3 at most, so at least 4 of those records name someone who was not there. Those records must be corrected, the value per HCP who did attend restated, and the other 8 programs reviewed the same way. The action is with Sam Patel, due Nov 6.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The investigation timelineOne case on seven lanes, flagged events ringed, a close-up by day with linked events, and the exhibit opened at its passage.
The report on the timelineThe case bar with its clock and legal hold, the evidence waiting in scope, and the Speak Up report with its key passages highlighted.
Agents at workThe evidence collector, timeline builder and policy analyst run in view, read-only and under legal hold.
Where sources disagreeThe Jul 16 receipt beside the sign-in sheet: 5 covers against 8 signatures, and the bill paid in two.
Exhibit and chain of custodyThe full exhibit with its highlighted passages, source, custodian, fingerprint, privilege and where it is cited.
Speak Up inboxNew reports from web, hotline and email, classified by the intake agent and matched to open cases — routed by a person.
Interviews on the timelineFour interviews built from the gaps, witnesses first and the subject last, each with its questions.
Interview outlinesThe counsel notice, the objective and every question with the event it tests, the gap it closes and the exhibit to show.
Allegations and findingsEach allegation against its policy clause, evidence for and against, the proposal with its confidence and the investigator's finding.
The cited reportA privileged draft in the house format, every statement cited to its exhibit, ready to send to counsel.
Signed by counselThe report signed by counsel, and the corrective actions created as tasks.
The dashboardCases closed, median days to close against the industry, substantiation, days to first interview and where the days go.
Your rulesPrivilege and counsel, findings, privacy and data scope, evidence sources, sign-off and monitoring rules from closed cases.
Governance

Built for scrutiny: cited, privileged, decided by people.

Every event and statement citedEvery timeline event cites the passage it rests on, and every report statement links to its exhibit. The report cannot be sent to counsel while a statement is uncited.
A person decides every findingThe policy analyst proposes a finding with its confidence; only the investigator records it, and the report uses her decisions, never the proposals. Below the confidence bar a proposal is never pre-selected.
Privilege and the counsel noticeCases under counsel direction carry the privileged and confidential label on every page and in the export. Every employee interview opens with the counsel notice, and it cannot be switched off.
Counsel approves scope and signsA new allegation the agents find outside the reported scope goes to counsel before it is investigated. Counsel signs the report, and the corrective actions get owners and due dates.
Legal hold, custody and privacyEvidence is collected read-only, inside the case scope and under legal hold, with a fingerprint and chain of custody per exhibit. EU employee data stays in the EU, and cross-border access needs the data protection officer's approval.
Every step on the audit trailEach agent step and each human decision is recorded in the case activity with who and when. Reporter identity is never shown to subjects, and an anti-retaliation notice goes to every named reporter.
Configuration

Your investigations procedure, not ours

Privilege, findings, privacy, sources and sign-off are settings. The safeguards your procedure requires are locked on.

SettingDefaultChoose from
Start these cases under counsel directionHCP interactions, anti-bribery, retaliation, patient supportOn · off
Scope changes need counsel approvalOnLocked on — required by the investigations procedure
Open every employee interview with the counsel noticeOnLocked on — required for every employee interview
Show the agents' proposed findingOnOn · off, to decide each allegation without seeing a proposal first
Call out proposals below this confidence70%60% · 70% · 80%
EU employee data stays in the EU regionOnOn · off; cross-border transfers need the data protection officer's approval
Default collection windowAllegation dates ± 90 daysAllegation dates ± 60 days · ± 90 days · Calendar year to date
Report sign-off, HCP interactions and anti-briberyOmar HaddadOmar Haddad · Priya Raman · Dana Okafor · HR counsel
Connections

Works with the systems the evidence already lives in

Speak Upweb form, hotline and email reports, named or anonymous
Email archiveeDiscovery under legal hold, read-only
Expense systemexpense reports, receipts and the card feed
Event systemspeaker programs, sign-in sheets and needs assessments
CRM, HR and learningcall notes and calendars, org and roles, training completions
Policies and SOPsthe code of conduct and SOPs, cited by clause
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
18days
median to close an investigation, against an industry median of 28
Closed on day 18
industry median is 28 days
estimated
30–50%
shorter investigation cycle, most of it saved in the evidence stage
Today28 days
With agents14–20 days
target
100%
of report statements tied to their exhibit, ready for counsel to sign
statements cited

“demo” = seen in the working solution, on its sample case data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (a published whistleblowing and incident-management benchmark, 2025, 4,000+ organisations — median closure 28 days, substantiation 44–46%). Context: US DOJ Evaluation of Corporate Compliance Programs (Sept 2024); HHS-OIG Special Fraud Alert: Speaker Programs (Nov 2020); Upjohn Co. v. United States (1981) on the counsel notice. People, companies, products and cases named on this page are fictional — characters and sample data in the working solution.

Questions

What compliance and investigations teams ask us.

What is compliance investigation case management?

Software that takes an ethics and compliance investigation from the report to a signed report and corrective actions: scope, legal hold, evidence, interviews, findings and sign-off in one case file. Compliance Investigation Case Management adds six agents that collect the evidence, lay it on one cited timeline, plan the interviews from its gaps and draft the report, for the investigator to decide and counsel to sign.

How does it build the investigation timeline?

The evidence collector reads the custodians and dates in scope under legal hold — email, CRM, expense, event, HR and training records. The timeline builder lays one event per fact on seven lanes, each linked to the passage it rests on, flags dates where sources disagree and links events that belong together, such as an email two days before a split payment.

Does the AI decide whether an allegation is substantiated?

No. The policy and substantiation analyst sets each allegation against its policy clause and proposes a finding with a confidence; it never records one. The investigator decides every finding, and the report writer uses her decisions, never the proposals.

How are interview outlines prepared?

The interview planner reads the open gaps on the timeline and writes an outline per person, witnesses first and the subject last. Every question names the event it tests and the exhibit to show, witnesses get no leading questions, and every employee outline opens with the counsel notice.

How does it protect privilege and the reporter?

Categories you choose start under counsel direction, and their interview memos and drafts carry the privileged and confidential label. Scope changes go to counsel first. The intake agent never reveals a reporter's identity, and every named reporter receives an anti-retaliation notice.

Can EU employee data stay in the EU?

Yes. EU cases are processed and stored in the EU region, and a US investigator opening EU evidence triggers a request for the data protection officer's approval. Both are settings, with the evidence sources connected read-only.

Do people stay in control?

Yes. The agents collect, order, propose and draft; the investigator routes each report, decides each finding and sends the report. Counsel approves scope changes and signs, and every agent step and human decision is on the case's audit trail.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your investigations procedure, policies and SOPs, and the systems your evidence lives in — and it goes live once every quality gate has passed. We will walk you through it on a closed case of your own first.

See it on
your cases.

We'll run Compliance Investigation Case Management on a closed case of your own.