PolicyIQ
One policy-governance platform inside Microsoft 365: version-controlled documents, mandatory acknowledgments, automated review cycles and a complete audit trail.
Wave 1 · Available95% acknowledgment rateIn your tenantKing IV · POPIA
DWxRisk & Audit
One enterprise risk and audit platform that runs entirely inside Microsoft 365, with AI that surfaces escalating risk before it becomes an incident, and tracks every finding to closure.
Digital Workplace eXcellence (DWx)
Risk & Audit
Product
Available60% faster risk identificationIn your tenantKing IV · POPIA
- Category
- Governance intelligence
- Built on
- Microsoft 365 + Azure OpenAI
- Data residency
- Stays in your tenant
- Availability
- Available
Risk is everywhere. Visibility is nowhere.
Risk register · live
Risk & Audit- Controlled
POPIA Data Processing
Mitigation on track · residual risk low · owner assigned
- At risk
Third-Party Vendor Access
Trend Analyser: exposure rising 3 quarters running
- Effective
Access Recertification Control
Rated 'Effective', evidence 40 days overdue; failing forecast
The AI reads the evidence, not the rating. The third control is 'Effective' today, and forecast to fail before the audit cycle closes.
What it delivers
- 60%
- Faster risk identification
- 100%
- Findings tracked to closure
- 75%
- Less board-report prep
- 100%
- Data stays in your tenant
AI trend analysis and automated scoring surface emerging threats before they escalate.
Every finding followed from identification to verified closure. No email follow-ups, none lost.
One-click heat maps and risk summaries replace days of manual spreadsheet assembly.
All risk and audit data inside Microsoft 365. No third-party database, no data-processing gaps.
Risk lives in spreadsheets. Findings die in inboxes. Board packs take days, and your data leaves the tenant.
Spreadsheet registers
Risk data trapped in version-confused spreadsheets nobody trusts. Critical risks go unnoticed until they become incidents.
Findings lost in email
Corrective actions assigned by email, with no deadlines and no accountability trail. Half of every quarter's findings quietly slip.
Ungoverned GRC data
Sensitive risk and audit data sits in third-party GRC platforms your IT team cannot see, govern or audit.
DWx Risk & Audit replaces the sprawl with one platform that runs inside Microsoft 365, and adds AI that surfaces escalating risk before it becomes an incident. The engines advise; your people decide.
Three AI engines. Advisory, intelligent, always learning.
They read the register the way an analyst would, spotting the trend, classifying the finding, recommending the fix, the moment it matters. Humans always make the final call.
01
Risk Trend Analyser
AdvisoryContinuously analyses the risk register for emerging patterns and escalating trends, flagging risks that are worsening and clusters that signal systemic issues, before they cross critical thresholds.
02
Audit Finding Classifier
AdvisoryAuto-categorises and prioritises new audit findings from historical patterns, suggesting severity, assigning categories, and routing to the right team, so triage takes minutes not days.
03
Mitigation Recommender
AdvisorySuggests mitigation strategies from similar past risks and industry benchmarks, what worked and what didn't, giving risk owners a head start on every new risk.
Everything you need to govern risk, in one place.
Risk Register configurable likelihood and impact matrix, full audit trail
Audit Finding Tracker root-cause plus corrective-action plans to closure
Interactive Heat-Map Dashboards board-level view, one-click drill-down
Risk Scoring Engine configurable criteria, weightings and thresholds
Mitigation Action Plans owners, deadlines, automated reminders
Board-Level Summary Reports one-click packs, always current
Risk Category Taxonomy Strategic, Operational, Financial, Compliance, Reputational
Finding Severity Classification four-tier model with auto-escalation
DWx SHE & CI Integration safety risks flow in, no re-entry
DWx ContractIQ Integration contractual risks tracked as live register items
What third-party GRC SaaS can't do.
Compared with the enterprise GRC platforms most teams bolt on around Microsoft 365: Diligent, Resolver, Galvanize, or spreadsheets.
| Capability | DWx Risk & Audit | Third-party GRC SaaS |
|---|---|---|
| Runs inside your Microsoft 365 tenant | ||
| Zero risk and audit data leaving your environment | ||
| Priced per tenant, no per-seat SaaS fees | ||
| AI risk-trend analysis and finding classification | ||
| Board-ready heat maps in one click |
A tailored view for every seat at the table.
Chief Risk Officer
Board reporting and a strategic risk view
“Show me our top-10 risks, their trends and mitigation status, board-ready in minutes, not days, and without chasing owners for updates.”
Internal Auditor
Every finding tracked to closure
“I raise 50 findings a quarter and lose track of half. I need every one tracked to closure with clear owners and deadlines.”
Executive Committee
Risk exposure at a glance
“One honest heat map I can trust: what is critical, what is trending up, and whether our mitigations are actually working.”
How you get started
- 01
Discovery
A commitment-free call to map your process and compliance needs against the platform.
- 02
Deploy
We deploy the SharePoint Framework solution into your tenant and configure the Azure OpenAI engines. Nothing leaves your environment.
- 03
Run
Your teams work in the tools they already use. The agentic engines run proactively from day one; humans approve every consequential decision.
Enterprise-grade · Microsoft-native
It runs in your tenant. Microsoft bills you directly.
Built on Azure OpenAI with no black-box dependencies and no data lock-in. Risk & Audit runs in your Azure subscription in South Africa North, your risk and audit data never leaves your environment, and you remain the data controller. King IV combined-assurance and POPIA obligations map cleanly to an in-tenant register.
Azure paid direct to Microsoft. First Digital does not mark up Azure.
Azure OpenAI · GPT-4oSharePoint OnlineMicrosoft TeamsMicrosoft GraphAzure Functions · .NET 8SPFx · React · Fluent UI
Per tenant
R0 per-user licence fees. Azure consumption only.
Summary & benefits
- A risk register the board actually trusts, because it is current
- Escalating risk flagged before it becomes an incident
- Every finding followed to verified closure, not assumed closed
- King IV and POPIA obligations held in one in-tenant register
- No per-user licence fees, Azure consumption only
Take Risk & Audit with you.
The official DWx Risk & Audit product explainer, the same one-page brief our team hands over.
See your risk register come alive.
Stand DWx Risk & Audit up in your tenant, on your real register. Two weeks to your first board-ready heat map, with the AI flagging the risk that is quietly escalating.
Book a discovery callMore from Digital Workplace eXcellence (DWx)
Worth a look next.
ContractIQ
One AI-powered contract lifecycle platform inside Microsoft 365, with agentic AI that flags risky clauses and looming renewals weeks before they cost you.
Wave 1 · Available9.2% of revenue lost to poor CLMIn your tenantZero per-seat fees
SHE & CI
One safety, health and environment platform inside Microsoft 365, from near-miss capture to Kaizen improvement, with trending that flags the incident before it happens.
Available90% faster incident reportingIn your tenantISO 45001 · OHS Act
Get in touch
Got a problem worth solving?
Let’s talk.
Send us the gist of what you are trying to do. The right person from First Digital will be in touch within a working day.