Ignacheck
AI-Powered Compliance Audit Platform
Lead engineer — architecture and rebuild
The problem
Financial institutions have to evidence compliance against frameworks like ISO 27001 and SOC 2, and the manual version of that work means reading policy documents side by side with control requirements and recording the gaps by hand. It is slow, inconsistent between reviewers, and expensive to repeat each audit cycle.
An existing Python MVP proved the concept but was not built to carry multiple institutional clients: no tenant isolation, no role model, and no ingestion pipeline capable of handling the document formats clients actually send.
What I built
Multi-tenant foundation
A rebuild onto .NET 8 and Angular 17 with tenant isolation enforced at the data layer and strict role-based access control, so one financial institution's documents and findings are never reachable from another's session.
AI orchestration layer
An orchestration layer that runs automated gap analysis of client documentation against regulatory framework controls, producing findings a human reviewer confirms rather than assembles from scratch.
Document ingestion pipeline
A secure ingestion pipeline supporting PDF and DOCX parsing with OCR for semi-structured and scanned material, so the source documents institutions already hold can be used without re-keying.
Architecture
ASP.NET Core API on .NET 8 with an Angular 17 frontend, backed by PostgreSQL and deployed on AWS.
Tenancy is a first-class concern rather than a filter applied at query sites, which keeps isolation guarantees in one place instead of spread across every endpoint.
Impact
- ▸Replaces a manual, reviewer-dependent gap analysis process with a repeatable one.
- ▸Currently in active development.