From the first inventory to the auditor’s last question.
Five use cases, one loop: know your systems, assess them, absorb policy changes, watch for risk, and show your work. They share one registry, one evidence store and one audit trail.
Inventory
Know every AI system your department runs, in the register's own format
Start from the public Government of Canada AI Register, add the governance fields it lacks, and keep one record per system that owners maintain and auditors trust. Tovris imports the register, reports what is missing and exports it back in the published format.
Admin · Owner · GC AI Register · AIA
- Register entries imported, 0 failures
- 412
- Organizations in the published register
- 43
- Published fields, kept under their own names
- 24
Assessment
Assess each system against the DADM, with evidence a reviewer can check
Tovris works out which requirements of the Directive on Automated Decision-Making apply to a system, checks each one against the evidence you linked, and returns one of five results with a confidence score and citations. A person reviews every finding before it counts.
Assessor · Reviewer · DADM · AIA · PSD
- DADM 2025 requirements apply at level III
- 39 of 45
- Samples per requirement behind each confidence score
- 3
- Possible results, including “unable to determine”
- 5
Policy change
When a directive is amended, see every system it affects before you publish
Tovris compares the old and new editions requirement by requirement, shows which systems each change affects and why, and opens reassessment tasks for the systems already assessed. Only the changed requirements are assessed again.
Admin · Owner · DADM 2023 → 2025
- Requirements added by the June 2025 DADM amendments
- 11
- Requirements modified
- 34
- Requirements retired
- 6
Risk monitoring
Catch drift and unfair outcomes between assessments
Tovris watches data quality, input drift and output measures for each system. When a measure crosses its line, the result is filed as evidence, findings are raised on the linked requirements, a reassessment task opens, and your ticketing system hears about it.
Owner · Assessor · DADM 6.3
- Default drift alert line (Population Stability Index)
- 0.2
- Injected breaches caught in testing, no false alarms
- 2 of 2
- Ticket priorities on the signed webhook
- P1–P4
Audit and reporting
Show how every conclusion was reached, long after it was made
Every change in Tovris goes into an append-only audit log, hash-chained per organization. Reports in English and French show the results, the evidence and the reviewer's decision, and anyone with audit access can check that the history has not been altered.
Auditor · Admin · Every pack
- Governance API routes permission-tested for every role
- 140
- Kinds of tampering the chain check catches: edit, removal, reordering
- 3
- Roles; auditors read everything and change nothing
- 5
Figures come from the build and the simulated Government of Canada test environment · synthetic data
Five roles, checked on every request
Roles can come from your identity provider. The server enforces them on every route, so the console and the API always agree.
- 01Admin
Manages users, roles, API keys, settings and retention, and publishes new policy versions.
- 02Owner
Keeps their AI systems' records current, completes AIAs and handles reassessment tasks.
- 03Assessor
Runs assessments and adds evidence and attestations.
- 04Reviewer
Validates, rejects, modifies or annotates findings.
- 05Auditor
Reads findings, evidence, reports and the audit log, and changes nothing.
Four rules every use case follows
They are built into the product, not left to configuration.
- 01
A person makes every decision that counts, and the model's original answer stays on the record.
- 02
When the evidence is not there, the answer is “unable to determine”, never a guess.
- 03
Policy text is quoted from the official source in both languages, never paraphrased.
- 04
Government of Canada data, and the model calls that use it, stay in Canada.
Pick a use case, we will run it
Tell us which one matters most to your department and we will walk through it on synthetic data, in English or French.
Live walkthrough · English or French · Synthetic data only