product
web
GRC analysts, security engineers, and compliance owners who already keep policy files on disk and run this tool locally.
Turn a local policy file into readable control mappings without using the CLI. The user chooses a file, the app parses it, and the app shows obligations and framework hits.
A quiet local workbench for policy ingest — not a SaaS dashboard, not a marketing site.
Institutional, precise, calm under pressure. Think night audit desk: charcoal surface, moss indicator light, monospace control ids.
- Purple-on-black AI SaaS shells
- Cream / parchment “editorial” landing pages
- Metric-card grids with glow accents
- Rounded-full pill clusters and badge soup
- Inter / Roboto / generic system-default marketing kits
- One job per screen: choose a file, read the parse.
- Data before decoration — obligations and control ids lead.
- Dark by default; light only if the OS forces a preference later.
- Familiar product affordances (drop zone, table, tabs) over invented chrome.
- Failures are plain and fixable (missing optional deps, bad file type).
WCAG AA contrast on body and controls. Keyboard operable drop zone and tabs. Respect prefers-reduced-motion.