Every Tool You Need to Stay Compliant
From AI-powered analysis to automated document generation, Alternivite gives you complete visibility and control over your compliance posture.
Multi-Tenancy
Every organization gets its own isolated workspace with dedicated data, users, and settings. Tenant scoping is enforced at the application layer.
- Complete data isolation between organizations
- Independent user directories per tenant
- Custom branding and configuration per workspace
- Scalable infrastructure that grows with your client base
Technical Highlights
Centralized tenant scoping ensures all queries, file operations, and API requests are bound to the authenticated tenant.
Every API request carries a tenant context token. Middleware validates scope before any data access.
Per-tenant storage quotas and rate limits ensure fair resource usage across all organizations.
Self-service tenant settings for branding, notification preferences, and user management.
Secure Uploads
Drag-and-drop your compliance documents with confidence. Every file is validated, encrypted at rest, and stored in per-tenant subdirectories outside the webroot. Support for PDF, DOCX, CSV, XLSX, and image formats with automatic metadata extraction.
- Encrypted file transfers with TLS 1.3
- Extension and MIME type validation on every upload
- Automatic format detection and metadata extraction
- Version history with full rollback capability
Technical Highlights
Uploads are validated and stored in a single secure transfer, sized comfortably within your plan's storage quota — no need to manage multi-part uploads for typical compliance documents.
All uploads are validated against extension and MIME type allow-lists. PHP-native heuristic checks detect suspicious file content. File size limits are enforced per upload.
AES-256 encryption via PHP OpenSSL with per-tenant encryption keys stored in the database.
Authenticated file access through secure endpoints. Files are never directly accessible via URL.
AI Analysis
Upload any compliance document and Alternivite's AI engine reads, understands, and maps it against the relevant frameworks. Get plain-English summaries of dense legal language with risk scoring on every clause.
- Natural language summaries of complex regulatory text
- Automatic framework mapping across GDPR, CCPA, HIPAA, SOC 2, and more
- Risk scoring per clause with severity and likelihood ratings
- Background processing with results available in your dashboard
Technical Highlights
Documents are queued and processed in the background. Analysis results appear in your dashboard as they become available.
Identify obligations, rights, deadlines, and penalties from regulatory text, with every result confidence-scored and low-confidence items flagged for human review.
Every AI output includes a confidence score. Low-confidence items are flagged for human review.
Full traceability from AI output back to source document sections. Every decision is explainable.
See Where Your Analysis Stands
When you upload a document, Alternivite runs the analysis in the background. You don't have to wait — track its progress every step of the way and check back when it's done.
- Live status updates — no need to refresh the page
- Clear progress at every stage, from upload to findings
- Automatic retry if an analysis hits a temporary hiccup
- Results appear in your dashboard the moment they're ready
Gap Detection
Alternivite compares your current policies, procedures, and technical controls against each applicable framework and identifies exactly what's missing. Every gap comes with a severity rating, remediation steps, and estimated effort.
- Instant gap analysis across multiple frameworks simultaneously
- Severity-rated gaps with remediation priority scoring
- Contextual remediation steps tailored to your business size
- Tracking dashboard showing gaps closed over time
Technical Highlights
Automated mapping between your existing controls and framework requirements using semantic similarity matching.
Each gap is scored on likelihood, impact, and effort-to-fix. Prioritized remediation queues generated automatically.
Pre-built remediation templates and playbooks for common gaps. Customize or create your own.
Historical gap data with trend charts. Show auditors your improvement trajectory over time.
AI Document Generation
Generate compliance-ready policies, procedures, and plans in minutes. Alternivite's AI drafts documents based on your business profile, industry, and applicable frameworks. Every generated document is customizable, version-tracked, and export-ready.
- Pre-built templates for 17 compliance document types
- AI-populated with your business details, not generic boilerplate
- Editable in-browser with collaborative review support
- Framework-aligned section headers and required clauses
Technical Highlights
Handlebars-based templating with conditional sections, loops, and framework-specific clause injection.
AI pulls from your organization profile, data map, and risk register to populate documents accurately.
Documents requiring legal review are auto-flagged. Review workflow with comment threads and approval gates.
Export generated compliance documents as PDF. Version diffs track every change from AI draft to final approved version.
Compliance Health Scores
See your compliance posture at a glance with real-time health scores. Each framework gets a percentage score based on implemented controls, documented policies, and resolved gaps. Scores update automatically as you complete remediation tasks.
- Real-time scoring across all applicable frameworks
- Drill-down into individual control categories
- Trend charts showing improvement over time
- Shareable scorecards for board reporting
Technical Highlights
Control weights based on framework criticality. High-impact controls carry more weight in the overall score.
Scores recalculate in real-time as controls are verified, gaps are closed, or new assessments are completed.
Full score history with daily snapshots. Export trend data for compliance reports and board presentations.
Compare your scores against similar-sized organizations on Alternivite. Know where you stand.
Deadlines
Never miss a compliance deadline again. Alternivite tracks regulatory filing dates, assessment cycles, policy reviews, training renewals, and audit schedules. See everything on a unified calendar with automatic countdown alerts.
- Centralized calendar for all compliance deadlines
- Automatic countdown alerts at 30, 14, 7, and 1 day(s)
- Dependency tracking between related deadlines
- Recurring deadline auto-generation for annual requirements
Technical Highlights
Track deadlines with due dates, status, and dependency links across frameworks. Automated reminder windows keep the team on schedule.
Export your compliance calendar to Google Calendar, Outlook, or any iCal-compatible app via a personal calendar feed link.
Automated compliance reminders are scheduled at 30, 14, 7, and 1 day(s) before each deadline, so key dates are never missed.
Link related deadlines so dependent work is tracked together. Circular dependencies are blocked automatically.
Notifications & Reminders
Automatic email and system notifications keep your team on track without checking the dashboard. Compliance deadline reminders and scheduled notifications ensure nothing slips through the cracks.
- Automated compliance deadline reminders at 30, 14, 7, and 1 day(s)
- Scheduled notifications for upcoming filings, reviews, and renewals
- System notifications for account, document, and analysis updates
- Role-based notification routing
Technical Highlights
Database-backed email queue with retry handling. Failed emails are retried automatically.
HTML email templates with dynamic content injection. Branded with your organization's logo and colors.
Notifications and emails are processed via a scheduled queue with automatic retry handling for failed sends.
Users can mute non-critical notifications. Critical alerts (breach, deadline) cannot be unsubscribed.
Team Roles
Assign granular roles to every team member. From read-only observers to full administrators, control exactly who can view, edit, approve, and publish compliance documents and settings.
- Predefined roles: Admin, Manager, Reviewer, Viewer
- Custom role creation with granular permissions
- Department-level access scoping
- Approval workflow gates for document publishing
Technical Highlights
Role-Based Access Control with permission matrices checked at API, service, and UI layers.
Define roles with fine-grained permissions: read, write, approve, publish, delete per resource type.
Tenant-scoped sessions with role checks enforced at the application layer on every request.
Role changes are logged with before/after state. Who changed what, when, and why — fully auditable.
Audit Logs
Every action in Alternivite is recorded in an immutable audit log. From document edits to user role changes, nothing escapes the trail. Filter, search, and export logs for auditors with a single click.
- Immutable, append-only audit trail for all actions
- Filterable by user, action type, resource, and date range
- One-click export for auditor requests
- Retention policies aligned with framework requirements
Technical Highlights
Audit records are write-once. No update or delete operations are permitted on log entries.
JSON event format with actor, action, resource, timestamp, IP, and before/after state snapshots.
Filter log entries by user, action type, resource, and date range. Export the matching records for auditor requests.
Retention aligned with your plan: 30 days (Basic), 1 year (Professional), or unlimited (Enterprise), configurable per framework requirements.
Admin Portal
A dedicated administrative dashboard for platform operators. Manage tenants, users, billing, system health, and feature flags from a single control plane. Real-time metrics and one-click provisioning.
- Multi-tenant management with instant provisioning
- System health monitoring and alerting
- Feature flag management for gradual rollouts
- Billing overview and subscription management
Technical Highlights
Tenant creation with an admin account and default subscription, provisioned in the platform's tenant-scoped schema and logged to the audit trail.
Track job queue depth, background worker status, average compliance score, and revenue snapshots with refreshable health views.
Enable or disable features per tenant or globally as the platform rolls out new capabilities.
Separate admin roles: Super Admin, Support Admin, Billing Admin. No single admin has unrestricted access.
Version Control
Every document has a complete version history. See who changed what, when, and why. Compare any two versions side-by-side with visual diffs. Roll back to any previous version with one click.
- Full version history for every document
- Side-by-side version comparison with visual diffs
- Named versions with change notes and author attribution
- One-click rollback to any previous version
Technical Highlights
SHA-256 content hashes detect tampering. Any unauthorized modification breaks the chain.
Word-level diffs for text documents and metadata-level comparison for binary uploads, with add/delete/change highlighting across versions.
AI-generated documents start as drafts. Templates such as DPAs and regulated frameworks (HIPAA, PCI DSS, NY DFS) are auto-flagged for legal review before finalisation.
Immutable snapshots stored with full metadata. Download any version as PDF.
PDF Export
Export any document, report, or compliance summary as a professionally formatted PDF. One-click generation with your branding, logos, and formatting. Perfect for auditor submissions, board reports, and stakeholder presentations.
- One-click PDF generation from any page
- Custom branding with logo, colors, and headers
- Table of contents auto-generation for long documents
- Print-optimized layouts with proper page breaks
Technical Highlights
PDF generation is implemented using a pure-PHP PDF engine suitable for lightweight hosting environments.
Customizable PDF output with company branding, cover headers, and footers generated per organization.
Large documents generate in the background. Email notification when the PDF is ready for download.
Optional detached digital signature over the document hash. Cryptographically verify the file has not been altered since signing.
Encryption
Your compliance data is protected with AES-256 encryption at every stage. In transit via TLS 1.3, at rest via AES-256, and in the database with per-tenant encryption keys. Per-tenant encryption keys ensure your data is isolated from other organizations on the platform.
- TLS 1.3 for all data in transit
- AES-256 encryption for all data at rest
- Per-tenant encryption keys with database-backed key storage
Technical Highlights
AES-256 encryption keys are generated via PHP OpenSSL and stored encrypted in the database. Keys are never stored in plaintext.
Each tenant's encryption key is generated independently and stored encrypted in the database. Compromising one key does not affect other tenants.
Encryption keys are stored encrypted in the database and managed through the application.
Enterprise plan customers can bring their own encryption keys (BYOK). Full control over key lifecycle including revocation and destruction.
PayFast Billing
Seamless billing integration with PayFast for South African and international payments. Subscription management, invoice generation, and payment tracking all built into the platform. No third-party billing tools required.
- PayFast integration for ZAR and international currencies
- Automated subscription billing and renewals
- Generated invoices with tax calculations
- Payment failure handling with retry logic
Technical Highlights
PayFast ITN (Instant Transaction Notification) with HMAC signature verification and idempotent processing.
Automated upgrade, downgrade, cancellation, and reactivation flows with prorated billing.
Auto-generated PDF invoices with tax breakdowns, PO numbers, and custom fields per tenant.
MRR, ARR, churn, and expansion metrics aggregated nightly into revenue snapshots with historical trend data.
Responsive Dashboard
Access your compliance cockpit from any device. The responsive dashboard adapts seamlessly from widescreen monitors to tablets and phones. Pin your most-used widgets, customize layouts, and stay current wherever you are.
- Fully responsive from 320px to 4K displays
- Drag-and-drop widget layout customization
- Automatic data refresh without page reloads
- Dark mode support for low-light environments
Technical Highlights
Fluid grid with auto-fit and minmax for perfect scaling. No fixed breakpoints — adapts continuously.
Dashboard data refreshes automatically using scheduled polling, so status and scores stay current without manual reloads.
Modular widget architecture. Add, remove, reorder, and resize widgets per user preference.
Vanilla JavaScript with no heavy frameworks, keeping the dashboard fast on any device and connection.
Ready to Take Control of Your Compliance?
Start your 14-day free trial today. A debit or credit card is required at onboarding — you're only billed from day 14 if you don't cancel. Cancel anytime. Full access to every feature.
Prefer the technical details? Read how Alternivite is built