← All agentsIOF Agent · compliance-governance

Compliance & Governance Agent

GAEnterprise

Checks missing approvals, policy gaps, AAOIFI/IFSB evidence, control failures.

Continuously scans contract lifecycles, workflow states, and policy-engine decision logs for missing approvals, expired attestations, and Shariah-governance gaps. Surfaces findings ranked by severity.

Capabilities

  • validate — Check every contract against the AAOIFI Shariah Standards (SS-8 to SS-39) for required approvals and fatwa references.
  • summarize — Roll up control failures by tenant, workspace, rail, and severity.
  • recommend — Suggest the named human approver and the policy clause that triggered the gap.

Reads (inputs, read-only)

Contract records + Shariah board approvals
Policy-engine decision logs
Control attestation registry
Audit trail (audit-core)

Produces (outputs, evidence-tagged)

Findings register (severity, evidence link, recommended remediation)
AAOIFI / IFSB compliance dashboard data

Approval-gated actions (never auto-executed)

Modifying any approval status (always human) Closing a finding (maker-checker)

Policy-engine resources (ABAC bounds)

compliancecontractgovernanceshariah_review

Compliance frameworks

AAOIFIIFSBSOC 2ISO 27001EU AI Act

MCP endpoint (intent)

Agent-calling platforms can reach this copilot via the MCP endpoint below once the server-side is deployed.

https://agents.islamicopenfinance.com/mcp/compliance-governance