QuartzIQ is an AI assisted governance, risk, and compliance platform built by QuartzX for internal control, risk management, compliance, and audit teams. It connects to enterprise data and models the organization as hierarchical, overlapping perimeters such as subsidiaries, divisions, business lines, teams, committees, entities, projects, and systems, so risks, controls, findings, losses, and monitoring share one system of record instead of spreadsheets and disconnected tools.
Perimeter roles such as Owner, Delegate, Data Manager, Performer, and Risk Assessor keep accountability clear. Enterprise risk management covers risk taxonomies and heatmaps, RCSA campaigns on customer models and formulas, scenarios, operational losses and incidents, and risk appetite and limit monitoring with data driven KRIs. Internal control and audit document and test controls, run audit engagements, and track recommendations through to evidenced closure with an intelligent risks and controls matrix that surfaces gaps. Regulatory compliance expresses obligations as controls on the existing inventory, with a control library spanning many regulations and regulatory reporting. Continuous monitoring and fraud detection runs automated controls against live data with business defined thresholds, a ready to use fraud control library, and AI assisted detection.
AI suggests controls, alert rules, KQL style monitoring logic, KRIs, and procedure drafts. People review and save before anything takes effect. Work items include alerts, scheduled control tasks, and forms with severity, performers, reviewers, and SLAs. Data arrives through a Forwarder agent or QuartzX connectors from ERP, core banking, HR, identity, ITSM, SIEM, and data lakes. Named connectors on public pages include SAP, Microsoft Dynamics 365, Workday, Salesforce, ServiceNow, Jira, Splunk, Active Directory, and Azure, plus generic SQL, file, and REST API connectors. SSO options include SAML. SCIM provisioning and SIEM log export are available on higher tiers.
QuartzIQ is modular and cloud native. Deployment options include SaaS, private cloud, hybrid, and on premises. The interface is available in English and French. QuartzX holds SOC 2 Type II, audited by Sensiba LLP, and ISO 27001 certifications, effective October 2026, and supports GDPR and PIPEDA compliance.