Evidence Discovery is here. And it's our biggest AI release to date.
This marks a significant step forward in how we're helping organisations manage compliance. Not by automating decisions that require human judgement, but by using AI to take on the repetitive, time-consuming work that takes valuable resource away from compliance teams.
Here's why we've built AI Evidence Discovery, what it means for our customers, and what makes our approach different.
Why have we built it?
Collecting, updating and maintaining evidence is one of the biggest time drains in compliance.
And as organisations grow, so do their frameworks, regulatory obligations and customer requirements. Yet the process of demonstrating compliance still involves repeatedly searching for documents, checking their relevance and uploading the same evidence against multiple controls.
The scale of this challenge is clear.
Research from A-LIGN found that 97% of organisations conduct at least two audits per year, with 74% of enterprises conducting four or more. A quarter cite managing multiple concurrent audits as their primary compliance challenge.
And while nearly every organisation (99%) believeharmonising their audits could save time and money, 27% don't know where tostart and 24% simply don't have the time.
But this isn't just about reducing the administrative burden of audits. It's about understanding your compliance posture throughout the year.
IBM's 2026 Cost of a Data Breach Report found that regulatory noncompliance added approximately $201,000 to the average cost of a data breach.
This reinforces the need for compliance to be continuous and proactive. Organisations need to understand what their existing evidence demonstrates, where controls are covered and where gaps require attention, rather than discovering these retrospectively when an audit approaches.
We wanted to change the way organisations approach evidence collection altogether.
Instead of compliance teams continuously searching for what they need, what if the right evidence could find them?
That's the thinking behind AI Evidence Discovery.
What does AI Evidence Discovery do?
AI Evidence Discovery continuously searches your connected systems for relevant evidence as it's created or updated – not retrospectively – and suggests where it belongs across your compliance frameworks.
Whether that's documents, certifications, reports, tickets or other supporting information, Hicomply does the searching and surfacing for you.
This means your team can:
- Stop searching retrospectively: Relevant evidence is discovered as you go, rather than being gathered in a rush ahead of an audit.
- Reduce duplication: Evidence is suggested wherever it's relevant across your frameworks, so the same work can go together.
- Maintain continuous visibility: See what's available, what's been validated and where gaps still need attention.
- Build an audit-ready evidence bank: Keep evidence relevant, up to date and accessible throughout the year.
It's the latest development in our wider Hicomply AI capabilities, extending the smart workflows already built into our platform to streamline the processes that drain compliance teams of time and resource.
What doesn't it do?
It doesn't automate compliance. And that's intentional.
There's a growing number of platforms promising to automate more and more of compliance, including the decisions that sit behind it.
We've taken a different approach.
AI Evidence Discovery doesn't automatically approve evidence, determine whether a control is compliant or remove the need for human oversight.
Instead, it brings relevant information to the people responsible for making those decisions. Your team reviews, validates, accepts or rejects each suggestion, maintaining control over what forms part of your compliance programme.
And as your team makes those decisions, the system learns from that feedback to improve future suggestions.
For us, AI should make compliance professionals more effective, not replace their expertise or accountability.
Technology should minimise the legwork. People should always remain in control.
How is this different from what's already out there?
Other compliance platforms offer ways to surface evidence from connected systems.
But we believe there's a better way to do it.
Our approach isn't simply about finding a document and attaching it to a single control. It's about continuously discovering relevant evidence, identifying everywhere it can be used and keeping that information connected to your wider compliance programme.
All without asking your team to repeatedly search, collect and map the same information.
It's a more connected, continuous approach to evidence management, built around how compliance teams actually work.
Who is it available to?
AI Evidence Discovery is now available to Hicomply customers.
It's included for customers on our Enterprise plan, and available as an additional capability for customers on our Essentials and Professional plans.
If you're an existing customer interested in enabling AI Evidence Discovery, speak to your Customer Success Manager to explore what's available.
If you’d like to see AI Evidence Discovery in action and how this forms part of Hicomply’s whole-business compliance platform, book a demo with our team.
A final word
This is a release we've been particularly excited about, and one that reflects where we see the future of compliance technology heading.
Less time spent on repetitive administration. Better visibility of what organisations can demonstrate. And more time for compliance professionals to focus on managing risk, making informed decisions and driving meaningful business change.
A huge thanks to the people behind our Product Team, who have led this development and put a tremendous amount of work into bringing it to life. I look forward to what comes next.
It's an important milestone for Hicomply, and I'm to seeing the difference it makes for our customers.









.png)

.png)
.png)
.png)
