Skip to main content
Help Centre Support Contact
Partners
Create Free Account
Create Free Account Book a Demo

AI in ComplyFlow

Connect AI Assistants via MCP: Ask, Then Let It Act.

Ask ChatGPT, Claude, or Microsoft Copilot what is open at a site, then have it report an incident, close an inspection action, or record training. From your live ComplyFlow record, within the access you allow.

Book a Demo Read the AI Assistants Guide

Making changes with an AI assistant: the Help Centre article

  • Safety & HSE
  • Operations
  • IT & Data
  • Executive
Changes switched on per organisation, on request

Your AI Assistant Works in ComplyFlow, on Your Permissions.

MCP, the Model Context Protocol, is the open standard that lets an AI assistant work with another system. ComplyFlow runs an MCP server: Claude or ChatGPT signs in with your ComplyFlow account, and Microsoft Copilot connects with a personal token. The assistant reads your live record, drafts reports across modules, and, where write access is on, makes changes as you.

  • Your permissions, checked every time. Signed in from Claude or ChatGPT, the assistant sees and changes only what you can, and a change is recorded against you. A Copilot Studio agent works as the person whose token it uses.
  • Changes on request, per organisation. Reading works once assistant access is on. Making changes is a separate request to ComplyFlow support, as the Help Centre explains.
  • Your AI company, your agreement. Questions go to the AI service you chose, under your agreement with it. ComplyFlow does not store them (the overview).
A safety manager in a quiet open-plan office typing a question into an AI assistant on a laptop, a second monitor beside it showing a site map

How It Works

How ComplyFlow Connects Your Assistant. You Stay in Charge.

Sign in from the AI app, ask across your record, and let the assistant make the change you asked for.

Sign In From Claude or ChatGPT. No Token to Copy.

In Claude on the web, desktop, or mobile, or ChatGPT on the web, add ComplyFlow as a connector and sign in the way you normally do. There is no token to copy and nothing to install. On Claude Team and Enterprise plans an Owner adds ComplyFlow first, and ChatGPT needs a plan that allows custom connectors. Microsoft Copilot Studio connects with a personal API token instead.

  • Claude on the web, desktop, and mobile; ChatGPT on the web
  • Microsoft Copilot Studio, with a personal API token
  • Disconnect, and access ends immediately

Signing in with an AI app, in the Help Centre

Ask Across Your Record. Get the Report Back.

Sites, suppliers, Workers, staff, incidents, inspections, online and offline training, plant, permits and forms, and the risk register. Ask where the biggest training gaps are by site or which form responses are waiting for approval. Or ask for a monthly WHS report for the leadership team, or a one-page briefing for tomorrow’s pre-start.

  • Staff, training, and forms, alongside incidents and permits
  • A monthly WHS report from several modules at once
  • A site briefing pack or a toolbox talk, drafted for you

Prompting tips for reports, in the Help Centre

Let It Make the Change. On Your Word.

With write access on, the assistant can report an incident, add a corrective action, close an inspection action, record a training completion, invite a supplier, or put a permit on hold. It never goes beyond the permissions of the account it works as, and cannot change account settings. Signed in from Claude or ChatGPT, ComplyFlow records you as the person who made the change.

  • Incidents, corrective actions, inspection actions, and training
  • The account’s own permissions and sites, never more
  • Signed in, recorded against you as if made on screen

Making changes with an AI assistant, in the Help Centre

Security & Data

Security Your IT Team Can Sign Off. Five Checks on Every Request.

Read it from the outside in: what has to be true before an assistant reads or changes anything in ComplyFlow.

  1. 1 ISO 27001, hosted in AustraliaISO 27001 certified since 2019. All data held in Australian data centres on AWS, encrypted at rest and in transit.
  2. 2 One organisation per connectionEach sign-in or token is limited to the organisation chosen when it was set up, and never sees another organisation’s data.
  3. 3 Off until you ask for itYour organisation requests assistant access from ComplyFlow support. Then only staff given the MCP / API token access permission can connect.
  4. 4 The person’s own permissionsSigned in from Claude or ChatGPT, every request is checked against that person’s modules, sites, and permissions. Change them, and the assistant changes with them.
  5. 5 Changes only where you allow themWrite access is a separate request per organisation. It cannot change account settings, and every change is recorded in the person’s name.

Disconnect the app or revoke the token and access ends straight away, as it does when the person is deactivated. A Copilot Studio agent works as the person whose token it uses, so give that token the narrowest scopes. Questions go to the AI service you chose, under your agreement with it; ComplyFlow does not store the questions or the answers.

The full security model →

1 2 3 4 5 Your record Allowed: in, and back out Not allowed: turned away

What It Is Worth

ComplyFlow in the Chat: Fewer Screens, Fewer Reports by Hand.

No figure here is a promise. The return depends on how many questions, updates, and reports your team handles by hand each week, so bring those numbers to the demo.

For the person asking

  • Ask, then act, in one conversation

    See the open inspection actions at a site and close the one that is done, without opening four screens.

  • The report drafted from the live record, opens the Help Centre in a new tab

    A monthly WHS report or a site briefing pack, built from several modules at once.

  • On the phone in your pocket

    The ComplyFlow connection works in Claude’s mobile apps too, so a question asked on site gets the same answer as one at a desk.

For the business

The return, in your numbers

  • Questions a week

    How often someone asks who is overdue, what happened at a site, or how many are uncleared.

  • Updates made by hand a week

    Incidents logged, actions closed, training recorded. Against a sentence typed into an assistant.

  • Reports built by hand a month

    The leadership WHS report, the site briefing, the incident roll-up. Against asking for them.

  • How to get it, opens the Help Centre in a new tab

    Assistant access is available on all ComplyFlow plans, on request. The AI app runs on your own plan with its company.

Where the Help Centre documents an item, its name links to the article.

Who It Is For

What an AI Assistant in ComplyFlow Means for Me.

Find your job. The three lines under it are what changes for you.

How It Stacks Up

An AI Assistant on ComplyFlow Against the Ways Work Gets Done Now.

Two ways a manager gets an answer out of the record, or an update into it, today, and what each one cannot do.

Screens, filters, and exportsOpen each module, filter, export, update by handAsking the analystA one-off report, when they get to it ComplyFlowOne record, your standard
The live record, not a copy Built inPartlyRead from ComplyFlow as you ask
Asked in plain English, in the tool you already have open Not therePartlyChatGPT, Claude, or Microsoft Copilot
A report drawn from several modules at once Not therePartlyA monthly WHS report or a site briefing pack, asked for in the chat
Act on the answer in the same place PartlyNot thereReport, add, close, or record from the chat, where write access is on
Limited to your own permissions and sites Built inPartlySigned in, checked every time; never more than you can do
Every change attributed to a person Built inPartlyRecorded against you, as if made on screen

This compares ways of working, not named vendors. Nothing changes in ComplyFlow from the chat unless write access is switched on for your organisation.

The Other AI Jobs

Everything Else AI Does in ComplyFlow.

The same criteria, the same record, and the same rule: a person decides. Each feature has its own page; the AI page has the whole picture.

AI Document Review

Where you switch it on, every licence, ticket, insurance, and certificate is checked against your criteria on upload, before the approver sees it.

AI Agents

A review agent built in AI Tools, on your form type and your criteria, that scores a safety plan or answer as it is submitted.

AI Prequalification

A Supplier’s safety system, WHS policy, and SWMS reviewed against set criteria as they submit, then a person decides.

AI SWMS Review

A safe work method statement read against your criteria on the permit, the SWMS form, or the prequalification, before it is approved.

AI Course Creator

A site induction or toolbox talk drafted from your own procedures, edited by you, then published and assigned in Training.

AI in ComplyFlow

Review, draft, and ask: the three AI jobs on one page, with how they fit together.

Questions

Questions Buyers Ask About Connecting an AI Assistant.

What is MCP?

The Model Context Protocol, an open standard that lets an AI assistant work with another system. ComplyFlow runs an MCP server, so a connected assistant can read your record, draft reports from it, and, where write access is on, make changes for you.

Which AI assistants can connect?

Claude on the web, desktop, and mobile, ChatGPT on the web, and Claude Code sign in with your ComplyFlow account. Microsoft Copilot Studio, and other apps that speak MCP without offering sign-in, connect with a personal API token.

Can the assistant make changes in ComplyFlow?

Yes, once write access is turned on for your organisation, which is a separate request to ComplyFlow support. It can report incidents, add corrective actions, close inspection actions, record training, invite suppliers, put permits on hold, and more. It cannot change account settings.

Do we need a token or any software?

Not to sign in from Claude or ChatGPT on the web: add ComplyFlow as a connector and sign in the way you normally do. A personal API token, for apps that do not offer sign-in, lasts from 1 day to 1 year and can be revoked at any time. The Help Centre guidesets out both routes step by step.

Can the assistant see or change more than I can?

Not when you sign in from Claude or ChatGPT: it sees and changes only what you can, for your modules and sites, your permissions are checked every time, and a change is recorded against you. A Microsoft Copilot Studio agentshared with a team works as the person whose token it uses, so give that token the narrowest scopes that do the job.

Where does our data go when we ask a question?

As the Help Centre overviewsays, the relevant ComplyFlow data is sent to the AI service you chose so it can answer, under your organisation’s agreement with that AI company. ComplyFlow does not store your questions or the assistant’s answers.

What reports can the assistant draft?

Anything drawn from several modules at once: a monthly WHS report for the leadership team, a one-page briefing for a site’s pre-start, or a toolbox talk on the most common hazard. The prompting tipshave questions to copy.

How do we switch it on?

Assistant access is available on all plans: ask ComplyFlow support to turn it on, and separately to turn on write access. The Help Centre article on giving staff accesscovers the permission a person needs before they connect an app.

See ComplyFlow at Work. Book Your Demo.

Bring the questions your team answers by hand each week, and the updates they make. The demo takes 30 minutes, at a time you pick.

Book a Demo All AI in ComplyFlow
  • ISO 27001
  • Hosted on AWS
  • Microsoft & Okta SSO
  • API & MCP
  • Data in Australia

Compliance you can prove, instantly.