Every Tool You Need to Stay Compliant
From AI-powered analysis to automated document generation, Alternivite gives you complete visibility and control over your compliance posture.
Multi-Tenancy
Every organization gets its own isolated workspace with dedicated data, users, and settings. Share the platform, never share data. Tenant boundaries are enforced at the database, API, and application layers.
- Complete data isolation between organizations
- Independent user directories per tenant
- Custom branding and configuration per workspace
- Scalable infrastructure that grows with your client base
Technical Highlights
Row-level security with tenant IDs enforced at the ORM and database layer. No cross-tenant queries possible.
Every API request carries a tenant context token. Middleware validates scope before any data access.
Per-tenant rate limits, storage quotas, and compute allocations prevent noisy-neighbor problems.
Self-service tenant settings for branding, SSO, notification preferences, and user management.
Secure Uploads
Drag-and-drop your compliance documents with confidence. Every file is scanned, encrypted at rest, and stored in an isolated tenant bucket. Support for PDF, DOCX, CSV, XLSX, and image formats with automatic metadata extraction.
- End-to-end encrypted file transfers with TLS 1.3
- Malware and virus scanning on every upload
- Automatic format detection and metadata extraction
- Version history with full rollback capability
Technical Highlights
Large files are split into chunks, uploaded in parallel, and reassembled. Resumable on network failure.
ClamAV integration scans every upload before processing. Infected files are quarantined automatically.
AES-256 server-side encryption with per-tenant KMS keys. No plaintext at rest, ever.
Time-limited pre-signed URLs for downloads. No direct bucket access from the client.
AI Analysis
Upload any compliance document and Alternivite's AI engine reads, understands, and maps it against the relevant frameworks. Get plain-English summaries of dense legal language with risk scoring on every clause.
- Natural language summaries of complex regulatory text
- Automatic framework mapping across GDPR, CCPA, HIPAA, SOC 2, and more
- Risk scoring per clause with severity and likelihood ratings
- Multi-language support for international compliance documents
Technical Highlights
Documents are chunked, embedded, and processed through a RAG pipeline with framework-specific prompt templates.
Fine-tuned models identify obligations, rights, deadlines, and penalties from regulatory text with 95%+ accuracy.
Every AI output includes a confidence score. Low-confidence items are flagged for human review.
Full traceability from AI output back to source document sections. Every decision is explainable.
Gap Detection
Alternivite compares your current policies, procedures, and technical controls against each applicable framework and identifies exactly what's missing. Every gap comes with a severity rating, remediation steps, and estimated effort.
- Instant gap analysis across multiple frameworks simultaneously
- Severity-rated gaps with remediation priority scoring
- Contextual remediation steps tailored to your business size
- Tracking dashboard showing gaps closed over time
Technical Highlights
Automated mapping between your existing controls and framework requirements using semantic similarity matching.
Each gap is scored on likelihood, impact, and effort-to-fix. Prioritized remediation queues generated automatically.
Pre-built remediation templates and playbooks for common gaps. Customize or create your own.
Historical gap data with trend charts. Show auditors your improvement trajectory over time.
AI Document Generation
Generate compliance-ready policies, procedures, and plans in minutes. Alternivite's AI drafts documents based on your business profile, industry, and applicable frameworks. Every generated document is customizable, version-tracked, and export-ready.
- Pre-built templates for 50+ compliance document types
- AI-populated with your business details, not generic boilerplate
- Editable in-browser with collaborative review support
- Framework-aligned section headers and required clauses
Technical Highlights
Handlebars-based templating with conditional sections, loops, and framework-specific clause injection.
AI pulls from your organization profile, data map, and risk register to populate documents accurately.
Documents requiring legal review are auto-flagged. Review workflow with comment threads and approval gates.
Export as PDF, DOCX, or HTML. Version diffs track every change from AI draft to final approved version.
Compliance Health Scores
See your compliance posture at a glance with real-time health scores. Each framework gets a percentage score based on implemented controls, documented policies, and resolved gaps. Scores update automatically as you complete remediation tasks.
- Real-time scoring across all applicable frameworks
- Drill-down into individual control categories
- Trend charts showing improvement over time
- Shareable scorecards for board reporting
Technical Highlights
Control weights based on framework criticality. High-impact controls carry more weight in the overall score.
Scores recalculate in real-time as controls are verified, gaps are closed, or new assessments are completed.
Full score history with daily snapshots. Export trend data for compliance reports and board presentations.
Compare your scores against industry averages and similar-sized organizations. Know where you stand.
Deadlines
Never miss a compliance deadline again. Alternivite tracks regulatory filing dates, assessment cycles, policy reviews, training renewals, and audit schedules. See everything on a unified calendar with automatic countdown alerts.
- Centralized calendar for all compliance deadlines
- Automatic countdown alerts at 30, 14, 7, and 1 day(s)
- Dependency tracking between related deadlines
- Recurring deadline auto-generation for annual requirements
Technical Highlights
AI estimates realistic deadlines based on gap severity, team size, and historical completion data.
Two-way sync with Google Calendar, Outlook, and iCal. Deadlines appear where your team already works.
Configurable escalation chains. If a deadline is at risk, managers and admins are notified automatically.
Visualize how delays in one area cascade to other deadlines. Identify critical path items before they slip.
Email Reminders
Automatic email notifications keep your team on track without checking the dashboard. Configurable reminder schedules, escalation chains, and digest summaries ensure nothing falls through the cracks.
- Configurable reminder intervals per deadline type
- Escalation chains for overdue items
- Weekly compliance digest summaries for managers
- Role-based notification routing
Technical Highlights
Redis-backed job queue with retry logic. Failed emails are retried with exponential backoff.
HTML email templates with dynamic content injection. Branded with your organization's logo and colors.
Open rates, click-through rates, and bounce tracking. Know which notifications are being acted on.
Users can mute non-critical notifications. Critical alerts (breach, deadline) cannot be unsubscribed.
Team Roles
Assign granular roles to every team member. From read-only observers to full administrators, control exactly who can view, edit, approve, and publish compliance documents and settings.
- Predefined roles: Admin, Manager, Reviewer, Viewer
- Custom role creation with granular permissions
- Department-level access scoping
- Approval workflow gates for document publishing
Technical Highlights
Role-Based Access Control with permission matrices checked at API, service, and UI layers.
Define roles with fine-grained permissions: read, write, approve, publish, delete per resource type.
Map SAML/OIDC groups to Alternivite roles. Users inherit permissions from their identity provider.
Role changes are logged with before/after state. Who changed what, when, and why � fully auditable.
Audit Logs
Every action in Alternivite is recorded in an immutable audit log. From document edits to user role changes, nothing escapes the trail. Filter, search, and export logs for auditors with a single click.
- Immutable, append-only audit trail for all actions
- Filterable by user, action type, resource, and date range
- One-click export for auditor requests
- Retention policies aligned with framework requirements
Technical Highlights
Audit records are write-once. No update or delete operations are permitted on log entries.
JSON event format with actor, action, resource, timestamp, IP, and before/after state snapshots.
Live log streaming via WebSocket. Watch actions happen in real-time for security monitoring.
Configurable retention: 1 year (default), 3 years, 7 years, or indefinite per framework requirements.
Admin Portal
A dedicated administrative dashboard for platform operators. Manage tenants, users, billing, system health, and feature flags from a single control plane. Real-time metrics and one-click provisioning.
- Multi-tenant management with instant provisioning
- System health monitoring and alerting
- Feature flag management for gradual rollouts
- Billing overview and subscription management
Technical Highlights
One-click tenant creation with auto-configured database schemas, default roles, and starter templates.
Real-time API response times, error rates, active users, and storage utilization per tenant.
Toggle features per tenant or globally. Gradual rollouts with percentage-based targeting.
Separate admin roles: Super Admin, Support Admin, Billing Admin. No single admin has unrestricted access.
Version Control
Every document has a complete version history. See who changed what, when, and why. Compare any two versions side-by-side with visual diffs. Roll back to any previous version with one click.
- Full version history for every document
- Side-by-side version comparison with visual diffs
- Named versions with change notes and author attribution
- One-click rollback to any previous version
Technical Highlights
SHA-256 content hashes detect tampering. Any unauthorized modification breaks the chain.
Line-level and word-level diffs with add/delete/change highlighting. Export diffs as PDF.
Create draft branches for in-progress edits. Merge to main only after approval workflow.
Immutable snapshots stored with full metadata. Download any version as PDF or DOCX.
PDF Export
Export any document, report, or compliance summary as a professionally formatted PDF. One-click generation with your branding, logos, and formatting. Perfect for auditor submissions, board reports, and stakeholder presentations.
- One-click PDF generation from any page
- Custom branding with logo, colors, and headers
- Table of contents auto-generation for long documents
- Print-optimized layouts with proper page breaks
Technical Highlights
PDFs generated server-side using headless Chromium. Pixel-perfect rendering matching the web UI.
Customizable PDF templates with cover pages, headers, footers, and watermarks per organization.
Large documents generate asynchronously. Email notification when the PDF is ready for download.
Optional PDF/A compliance with digital signatures. Cryptographically verify document integrity.
Encryption
Your compliance data is protected with military-grade encryption at every stage. In transit via TLS 1.3, at rest via AES-256, and in the database with per-tenant encryption keys. Zero-knowledge architecture means we can't read your data even if we wanted to.
- TLS 1.3 for all data in transit
- AES-256 encryption for all data at rest
- Per-tenant KMS-managed encryption keys
- Zero-knowledge architecture with customer-managed keys
Technical Highlights
AWS KMS / Azure Key Vault for key generation, rotation, and destruction. Keys never leave the HSM.
Data encrypted with DEK, DEK encrypted with KEK. Double layer protects against key compromise.
Automatic key rotation on configurable schedules. Old keys retained for decryption, new keys for encryption.
Enterprise plan: bring your own keys. Full control over key lifecycle including revocation and destruction.
PayFast Billing
Seamless billing integration with PayFast for South African and international payments. Subscription management, invoice generation, and payment tracking all built into the platform. No third-party billing tools required.
- PayFast integration for ZAR and international currencies
- Automated subscription billing and renewals
- Generated invoices with tax calculations
- Payment failure handling with retry logic
Technical Highlights
PayFast ITN (Instant Transaction Notification) with HMAC signature verification and idempotent processing.
Automated upgrade, downgrade, cancellation, and reactivation flows with prorated billing.
Auto-generated PDF invoices with tax breakdowns, PO numbers, and custom fields per tenant.
MRR, ARR, churn rate, and LTV dashboards. Revenue forecasting with historical trend analysis.
Responsive Dashboard
Access your compliance cockpit from any device. The responsive dashboard adapts seamlessly from widescreen monitors to tablets and phones. Pin your most-used widgets, customize layouts, and get real-time updates wherever you are.
- Fully responsive from 320px to 4K displays
- Drag-and-drop widget layout customization
- Real-time data refresh without page reloads
- Dark mode support for low-light environments
Technical Highlights
Fluid grid with auto-fit and minmax for perfect scaling. No fixed breakpoints � adapts continuously.
Installable PWA with offline support. Service worker caches critical assets for instant loading.
Real-time dashboard widgets via WebSocket connections. Live scores, alerts, and activity feeds.
Modular widget architecture. Add, remove, reorder, and resize widgets per user preference.
Ready to Take Control of Your Compliance?
Start your free trial today. No credit card required. Full access to every feature.