# Whisperly

> AI-native compliance infrastructure for data privacy, AI governance and vendor risk, built on one connected model of the organisation. Agents do the work, every output is traceable to a source record, and a qualified human reviews and signs off. Built and operated by Lexelerate, a team of data protection and AI governance lawyers and engineers.

Traditional GRC tools are systems of record: they store what was documented. Whisperly is a system of contextual intelligence: it models how obligations, vendors, systems, data flows, controls and processes relate to one another, keeps that model current, and lets agents reason across it. Built for data-intensive organisations (roughly 150 to 1,500 employees), financial institutions, law firms, external DPOs and compliance consultants. Frameworks include GDPR, UK GDPR, FADP, CCPA, DORA, EBA outsourcing guidelines, the EU AI Act, ISO/IEC 42001 and NIST AI RMF.

## Full overview

- [Whisperly complete product overview](https://whisperly.ai/llms-full.txt): Problem, architecture, workflows, comparison with traditional GRC tools, audience, trust and security, terminology and FAQ in one Markdown file

## Company

- [Home](https://whisperly.ai/): Platform overview
- [About](https://whisperly.ai/about): Company, mission, team
- [Pricing](https://whisperly.ai/pricing): Plans for Trust Center, Privacy Automation, AI Governance, RFPs, and bundles
- [Book a Demo](https://whisperly.ai/book-a-demo): Request a guided product walkthrough
- [Contact Us](https://whisperly.ai/contact): Sales and support contact
- [Careers](https://whisperly.ai/careers): Open roles at Whisperly

## Products

- [Data Privacy](https://whisperly.ai/data-privacy): RoPA, DPIA, DSAR, transfers, retention and breach management
- [AI Governance](https://whisperly.ai/ai-governance): AI inventory and risk classification under the EU AI Act, ISO 42001 and NIST
- [Vendor Assessment](https://whisperly.ai/vendor-assessment): Third-party due diligence, outsourcing and DORA
- [RFP Automation](https://whisperly.ai/rfp-automation): Security questionnaire and RFP responses
- [Trust Center](https://whisperly.ai/whisperly-trust-center): Public compliance posture pages
- [Migrate to Whisperly](https://whisperly.ai/migrate): Switching from another GRC tool

## Use cases

- [RoPA Automation](https://whisperly.ai/ropa-automation): Records of Processing Activities
- [DSAR Automation](https://whisperly.ai/dsar-automation): Data Subject Access Requests
- [AI Policy Generator](https://whisperly.ai/ai-policy-generator): Drafting and maintaining AI policies
- [Security Questionnaire Automation](https://whisperly.ai/automate-rfp-responses): SIG, CAIQ, HECVAT
- [For Consultants](https://whisperly.ai/for-consultants): Law firms, external DPOs and compliance consultants

## Frameworks

- [GDPR](https://whisperly.ai/gdpr): EU GDPR compliance
- [UK GDPR](https://whisperly.ai/uk-gdpr): UK data protection requirements
- [EU AI Act](https://whisperly.ai/eu-ai-act): EU AI Act obligations

## Free tools

- [EU AI Act Checker](https://whisperly.ai/eu-ai-act-compliance-checker): Risk classification quiz
- [DPO Requirement Checker](https://whisperly.ai/dpo-requirement-checker): Whether a DPO is required
- [EU Representative Checker](https://whisperly.ai/eu-representative-checker): Whether an EU/UK representative is required

## Resources

- [Blog](https://whisperly.ai/blog): Articles on GDPR, AI Act, security, and compliance operations
- [Compliance Guides](https://whisperly.ai/all-compliance-guides): In-depth long-form guidebooks

## Optional

- [Privacy Policy](https://whisperly.ai/privacy-policy)
- [Terms of Use](https://whisperly.ai/terms-of-use)
- [Cookie Policy](https://whisperly.ai/cookie-policy)
- [Legal Center](https://whisperly.ai/legal-center): Terms, policies and SLA