Fibo

Fibo is the AI compliance orchestrator inside cSquare GRC. Here is who they are and how they work.

Reads a compliance program and reports scope, in-scope control counts, implementation progress and what is blocking the next milestone.

Creates a compliance program or lighter-weight initiative from a framework template, materializing its controls, tasks and milestones.

Lists controls for a program or framework with implementation status, owner, evidence coverage and in-scope versus excluded counts.

Marks controls as applicable or not applicable for the organization and records a grounded justification for the assessor.

Writes implementation narratives for controls using the tenant’s real systems, owners and evidence rather than generic boilerplate.

Lists evidence with validity windows, days until expiry and which controls each artifact covers, plus what is missing entirely.

Attaches existing evidence to the controls or requirements it satisfies, including across equivalent controls in other frameworks.

Lists policies grouped by master document, with lifecycle state, owning programs and template provenance.

Submits a policy for review, approves, publishes, archives or supersedes it with separation of duties enforced.

Reads, creates and updates risk entries with 1–25 scoring, treatment strategy, owner and linked controls.

Lists vendors with tier, review dates and outstanding assessments, and records assessment outcomes.

Lists open human and agent tasks across programs, flags stuck delegations, and creates, reassigns or closes tasks.

Unifies recommendations and gap findings into one queue, proposes remediation, and closes, resolves or reopens items.

Raises change requests, captures signed approvals, and tracks corrective and preventive actions to verified effectiveness.

Produces reports such as a Statement of Applicability, nonconformity register, executive summary or gap report in PDF, DOCX or Markdown.

Finds generated documents that are not yet attached to a program, control or finding, and links them to the right target.

Builds a workflow graph step by step (trigger, queries, conditions, notifications, tasks) and validates it before saving.

Reports control monitoring status, open alerts and the remediation tasks attached to them.

Searches curated regulatory facts and licensed standards text and answers with the authoritative source, section and date.

Reads what Document Intelligence extracted from uploaded files (audit reports, scans, certificates) and classifies staged uploads into evidence types and control mappings.

Describes Fibo’s identity, modes and live capability surface, with worked examples of each capability.

Reports recent releases, capability catalog state and drift between the catalog and shipped tools.