What is it?
You can connect AI assistants such as Claude, ChatGPT, GitHub Copilot and Microsoft Copilot to your ComplyFlow account. Once connected, ask questions in plain English and get answers from your own ComplyFlow data. Your assistant can also make changes for you, once write access has been turned on for your organisation. Write access is available on request.
This works through the ComplyFlow MCP server. MCP (Model Context Protocol) is an open standard that lets AI assistants work safely with other systems.
What can you do with it?
Ask questions, for example:
"Which suppliers at Albany Warehouse have expired insurance?"
"Which inspection actions are overdue, and who is responsible?"
"Summarise last month's incidents by site and type."
"Which workers have licences expiring in the next 30 days?"
"What are our highest-rated risks, and which sites are they on?"
"What dashboard alerts do I have?"
Build reports, for example a monthly WHS report, a site briefing pack or a toolbox talk, using data from several modules at once.
Make changes (write access, available on request), for example:
"Add a corrective action to this incident."
"Record that this worker completed the induction today."
"Invite this supplier to the Parramatta site."
"Put this permit on hold."
It covers Sites, Suppliers, Workers, Staff, Incidents, Inspections, Online and Offline Training, Plant, Permits and Forms, and the Risk Register.
Which AI assistants can I use?
AI assistant | How you connect | Available | Guide |
Claude Code, Claude Desktop | Personal API Token | Now | |
GitHub Copilot in VS Code | Personal API Token | Now | |
ChatGPT desktop app | Personal API Token | Now | |
Claude (web, desktop and mobile) | Sign in to ComplyFlow | Now | |
ChatGPT on the web | Sign in to ComplyFlow | Now | |
Microsoft Copilot Studio | Personal API Token | Now | |
Microsoft 365 Copilot | Sign in to ComplyFlow | Now |
Refer to Signing in with an AI app or using a Personal API Token for the difference between the two ways of connecting.
How your data is kept safe
Only people you allow. A person needs the MCP / API token access permission, or Edit Organisation Details, before they can connect anything. Your administrator controls who has it.
You choose what it can do. Each token or connection only has the items you tick when you set it up, for example reading incidents, or reading and changing workers.
It never sees more than you. Your assistant can only see and change what you can in ComplyFlow, for the same modules and sites.
Your organisation only. It never sees another organisation's data.
Easy to switch off. Revoke a token or disconnect an app at any time. Access also ends straight away if your account is deactivated.
Changes are made in your name. Anything your assistant changes is recorded against you, exactly as if you'd made the change on screen.
Where does my data go?
When you ask a question, the relevant ComplyFlow data is sent to the AI service you chose so it can answer you. That data is handled under your organisation's agreement with that AI company, so check their terms. ComplyFlow doesn't store your questions or the assistant's answers.
Is this the same as AI Review?
No. AI Review and AI Tools are built into ComplyFlow and check documents and forms. This feature connects your own AI assistant to your ComplyFlow data.
What do I need to get started?
1. AI assistant access turned on for your organisation. It's available on all plans, but it needs to be requested. Contact ComplyFlow support to have it turned on. Write access (letting your assistant make changes) is also available on request.
2. The MCP / API token access permission, or Edit Organisation Details. Refer to Giving staff access to AI assistants.
3. A supported AI assistant from the table above.
4. A Personal API Token, if your assistant uses one. Refer to Creating and managing Personal API Tokens.
5. Then follow the guide for your assistant.