cycy4016-star/grac_project

GRaC - Ghana Regulatory Compliance Agent: Multi-sector AI compliance assistant for Ghanaian law # GRaC - Governance, Risk & Compliance Agent **An AI-powered compliance assistant for cybersecurity and GRC professionals in Ghana.** GRaC helps compliance professionals automate the boring 20-30% of their work—document review, gap analysis, policy drafting, and compliance reporting—while keeping lawyers and analysts in full control. --- ## What GRaC Does ### For Ethical Hackers & Security Analysts Instead of writing 2-hour compliance reports after each engagement, describe your work to GRaC (voice or text) and get a professional, law-cited document in 5 minutes. ### For Company GRC Officers Upload your company policies. GRaC compares them against Ghanaian laws and generates a gap analysis report with specific recommendations. ### For Compliance Teams Ask compliance questions in plain English. GRaC searches Ghanaian law (Act 843, Act 1038, BoG CISD) and answers with exact citations. --- ## Architecture GRaC uses **multi-agent orchestration**. Each agent has ONE job and does it well: ``` User Input ↓ Supervisor Agent (decides which agents to use) ├→ Ingestor Agent (PDF → Text) ├→ Parser Agent (Text → Hierarchy) ├→ Embedder Agent (Chunks → Vectors) ├→ Retriever Agent (Query → Relevant Laws) ├→ Analyzer Agent (Policy vs Laws → Gaps) ├→ Writer Agent (Gaps → Professional Document) ├→ Transcriber Agent (Audio → Text) └→ Scorer Agent (Policy → Compliance %) ↓ Professional Output (PDF Report, Answer, Score) ``` --- ## Project Structure ``` grac/ ├── config/ # Configuration & sector management ├── data/ │ └── laws/ # Laws organized by sector │ ├── cybersecurity/ │ ├── fintech/ │ └── data_protection/ ├── agents/ # All specialized agents ├── tools/ # Agent tools ├── skills/ # Document templates by sector ├── api/ # FastAPI endpoints ├── database/ # Data persistence ├── utils/ # Utilities ├── tests/ # Test suite └── docs/ …