Introduction

Egret gives your team citation-backed answers drawn from curated official regulatory frameworks and your own internal policies — so every recommendation traces back to a real source, not an AI guess. Built for regulated industries including Business Continuity, Risk Management, and Cyber Resilience.

What is Egret?

General-purpose AI tools are trained on the open internet — they can sound confident while citing regulations that don't exist. Egret is different. We maintain a curated library of verified regulatory frameworks, updated continuously by compliance experts. When you ask a question, Egret searches this library alongside your organisation's own policies and returns answers with exact citations — document names, section numbers, and references you can verify yourself.

Egret is model-agnostic. As AI technology improves, your answers improve automatically — no migrations, no disruption.

How it works

When you ask a compliance question, Egret searches two knowledge bases simultaneously:

  1. Choose your domain — Select a specialised knowledge domain (Business Continuity, Risk Management, Cyber Resilience, and more). Each domain contains curated, jurisdiction-specific regulatory frameworks maintained by subject-matter experts.
  2. Ask in plain language — Type your compliance question as you would ask a colleague. Egret searches both the official regulatory library and your organisation's uploaded policies to find the most relevant guidance.
  3. Review cited, verifiable answers — Every response includes specific document references, section numbers, and source excerpts. If Egret can't find a source, it tells you.

Key features

  • Dual retrieval — Searches Egret's curated regulatory library and your organisation's private documents simultaneously
  • Knowledge Domains — Scoped document collections for different regulatory areas (Business Continuity, Risk Management, Cyber Resilience, and more)
  • Source citations — Every claim links back to its source document, section number, and excerpt
  • Streaming responses — Real-time token delivery via Server-Sent Events
  • Multi-tenant organisations — Role-based access with Owner, Admin, and Member roles
  • REST API — Full programmatic access to every capability via a robust REST API
  • AES-256 encryption — All stored data encrypted at rest; strict tenant isolation enforced
  • Zero training exposure — Your data is never used to train or fine-tune any model. Ever.

Next steps

Ready to get started? Follow the Quickstart guide to make your first query in under 5 minutes.