Skip to content

AI apps

Ask about your DPDP work from the AI app you already use

GRC Flow runs an MCP server, so AI apps such as Claude Desktop, Claude Code and Cursor can read your workspace, with your permission.

What the AI app can do

Ten read-only tools: the same ones the GRC Analyst uses inside GRC Flow.

  • Search the obligations and read a provision of the Act or Rules.
  • List workspaces and read their findings, risks and readiness plan.
  • Read the data-flow map and the evidence on file.
  • Score a risk by likelihood and impact.
  • Nothing in the workspace can be changed through it.

Keys you control

Each person creates their own key, and only that person's access goes with it.

  • A key is shown once, when it's created; only a hash of it is stored.
  • Revoke a key at any time from the API keys page.
  • A wrong or revoked key is refused.
  • Every tool call is written to the audit log.