warrendt/compliance-iq

AI-powered regulatory compliance mapping for Middle East & Africa frameworks (NCA ECC, SAMA CSF, PDPL, ADHICS, Oman CDC, MCSB) # ComplianceIQ **AI-Powered Compliance Control Mapping & Policy Generation for Azure** *Accelerate regulatory compliance across Government, Healthcare, and Financial sectors* --- ## Overview **ComplianceIQ** is a toolkit for implementing security and compliance controls in Azure cloud environments. It combines pre-built compliance control catalogs with an AI-powered mapping agent that can automatically map any compliance framework to the Microsoft Cloud Security Benchmark (MCSB) and generate deployable Azure Policy initiatives. ### Key Capabilities - **AI-Powered Mapping** — Upload a compliance PDF, and Azure OpenAI maps controls to Azure policies and Defender for Cloud recommendations - **7 Pre-Built Frameworks** — Ready-to-use mappings for SAMA, ADHICS, Saudi Arabia Government (NDMO), Saudi Arabia Government (NCA CSCC), South African Government, and Oman Government - **Azure Policy Generation** — Export compliant Azure Policy initiative JSON, including Sovereign Landing Zone (SLZ) archetypes - **Interactive Review UI** — Streamlit-based web interface for reviewing, editing, and approving AI-generated mappings - **End-to-End Pipeline** — Upload PDF → Extract Controls → AI Map → Review → Export Policy - **One-Click Deployment** — Deploy to Azure Container Apps with `azd up` ### Recent Improvements - **Task Management System** — Background tasks (AI mapping, PDF extraction) are tracked globally and survive page navigation. A task status bar shows active/completed jobs across all pages. - **Persistent Session State** — Controls, mappings, and policy decisions are auto-saved to Cosmos DB. Sessions can be recovered after browser refreshes or navigation. - **Backend Application Logs** — A new "Show Backend Logs" option in the sidebar streams live application logs from the backend container with configurable poll intervals. - **Entra ID Authentication** — Optional authentication via Container Apps Easy Auth v2, configurable through `azd env set AUTH_CLIEN …