On your premises
Installed in your own data centre or private cloud, for data that must not leave your walls.
Deployment and security
Deploy it where your data must stay.
Choose how CIYAJ runs. Every option has the same library, the same features and the same Audit Room.
Same features in every option
CIYAJ Cloud
Hosted and run for you. Nothing to install, and updates arrive without effort on your side.
With your Microsoft 365
For Microsoft 365 organizations, two ways to run it:
- In your own tenant, so records stay in your Microsoft 365
- With CIYAJ Cloud, with notices and approvals still reaching your Microsoft 365 email
- Your data stays where you deploy itRecords and evidence live in the deployment you choose. Nothing is copied elsewhere.
- An access matrixCapabilities per role, framework visibility, an evidence classification ceiling and an access review export.
- Evidence classificationEach evidence file carries a classification. People see only what is at or below their ceiling.
- Read-only for assessorsAuditors see the record but cannot change it, and external access ends on the date you set.
- A change log and a trailWho changed what in settings, and every decision on every control.
- Answers verifiedAn answer counts only after CIYAJ checks who answered, that they were asked and that the request is still current.
Questions
What buyers and assessors ask first.
Where is our data kept?
Where you choose to deploy CIYAJ: on your own premises, inside your own Microsoft 365, or in CIYAJ Cloud. Records and evidence stay in that deployment.
What do we need to run CIYAJ?
That depends on the option you choose. CIYAJ Cloud needs nothing installed. On your premises or in your Microsoft 365, CIYAJ is installed in your environment and set up with your team.
Can external auditors use it?
Yes. The External Auditor role gives read-only access to the Audit Room until an end date you set. After that date the role gives nothing.
Does CIYAJ use AI to decide compliance?
No. CIYAJ reads uploaded files and regulator documents to fill in what it can and to suggest links between frameworks. People decide: owners rate, reviewers approve and the Compliance team validates.
Is CIYAJ approved by NCA or SDAIA?
No. CIYAJ is an independent product. It is not affiliated with, approved or endorsed by NCA, SDAIA or NDMO, and it does not replace your organization's own accountability.
We are a consulting firm. How do we work with CIYAJ?
Deploy CIYAJ for each client in the option that suits them, under your look and name. Your assessors work in the Audit Room and test controls on reproducible samples. Choose "A consulting or audit firm" in the form below.
See CIYAJ against your own frameworks.
Tell us which frameworks are in scope and we will arrange a walkthrough with your team.