One programme per framework, with a clear trail.
made. Shield brings each framework's obligations, your evidence and the actions still open together in one programme. The AI drafts. A named person issues.
1. Choose your frameworks and jurisdictions
Set your organisation's home state or territory, then adopt the frameworks you follow. A work health and safety programme names the jurisdictions it covers; nothing is assumed. Add custom frameworks from your own codes, contracts and group standards.
2. Bring in your evidence
Upload policies, registers, contracts, HR records, safety logs and audit reports into one organisation library, or email them to the programme's private address at intake.madeshield.com. Your team can also add evidence from Claude, Copilot or Codex.
3. Confirm what counts
Shield reads each document and proposes which obligations it evidences, with the passage it relies on. Your people confirm or reject each proposal and set every obligation's status. Gaps become findings with an owner, a due date and an action.
4. Keep it current
Each obligation is re-checked on the schedule you set and as soon as new evidence arrives. Stale evidence is flagged, due checks appear on My work, and when a change to a framework is published before it starts, Shield lists the controls to re-map and the date.
5. Report and issue
The AI drafts posture reports, audit responses, gap assessments and remediation plans, citing the evidence for every claim. Pre-issue checks stop uncited claims. A named person reviews and issues each report as a digitally certified PDF, optionally with a second approver.
A tamper-evident evidence trail
Every evidence link, status change, finding, action and report is recorded in order in the programme's evidence trail, and any later change to an earlier entry shows. Each issued report is anchored to the trail at the moment it was issued, so an auditor can check that nothing behind it changed afterwards, using the evidence pack you give them.
Work where your team already works
Use the assistant built into made. Shield, or connect Claude, Microsoft 365 Copilot or Codex and work on the same programmes from there. Either way, the assistant drafts and proposes, and your people make the calls: confirming evidence, setting statuses and issuing reports stay with them, by design.
Your GRC tool can read it too
Your GRC tool can read findings, evidence and posture through our read API, or import CSV and JSON. Administrators create a named access key for each tool and can revoke it at any time.
Questions about evidence and reports
How does evidence get into made. Shield?
Bring evidence into made. Shield by upload, by email to your programme's own address, or from Claude, Copilot or Codex.
Each programme and your organisation's library has a private address at intake.madeshield.com. Your administrators choose who may send to it, and mail that fails sender checks is refused.
What files can made. Shield read?
made. Shield reads PDF, Word and Excel files, other spreadsheets, CSV and text files, emails with their attachments, and images such as photographs and scans.
Drawings (DWG and DXF) are kept and can be linked as evidence, but their contents aren't read. Original files are never changed.
What is made. Shield's evidence trail?
made. Shield keeps a tamper-evident evidence trail for every programme: each evidence link, status change, finding, action and report is recorded in order, and any later change to an earlier entry shows.
Every issued report is anchored to the trail at the moment it was issued, so an auditor can check that nothing behind it was changed afterwards. The trail records what happened and who did it, without copying personal information into it.
How does made. Shield keep checking compliance?
made. Shield re-checks each obligation on a schedule you set, and again as soon as new evidence reaches it, so your posture stays current without a quarterly scramble.
Evidence that has passed its review date is flagged as stale, and checks that are due appear on your team's My work list in the app.
Who confirms evidence in made. Shield?
People do. made. Shield proposes which obligation a document evidences, with the passage it relies on, and a person confirms or rejects each proposal.
The reasons for each finding are recorded in plain English, so anyone reviewing the programme can see why an obligation is marked as it is.
Do we upload the same policy to every programme?
No. made. Shield keeps one library for your organisation, with policies, incidents, contracts, HR records and safety logs, and each document can evidence obligations in any number of programmes.
When a document is replaced, every programme that relied on it is re-checked.
What does made. Shield decide, and what do people decide?
made. Shield's AI reads your documents, proposes which obligations they evidence, explains gaps in plain English and drafts reports; your people confirm or reject every proposal and set each obligation's status.
A named person issues every report, optionally with a second approver. Shield doesn't give legal advice and doesn't decide whether a breach or incident must be notified: it records the assessment and the person's decision.
Does made. Shield help with the Notifiable Data Breaches scheme?
Yes. made. Shield keeps a breach assessment record against the Notifiable Data Breaches scheme's elements and assessment timeframe, from when you became aware of a suspected breach.
The decision whether a breach is notifiable is your organisation's. Shield prepares the record and any statement for you to submit; it doesn't lodge anything with the Commissioner.
What reports can made. Shield prepare?
made. Shield drafts posture reports for boards and executives, audit responses, gap assessments, remediation plans, maturity uplift plans, breach and incident assessment records, and letters to auditors, regulators or customers.
Every claim in a report must cite its evidence or a figure from the register, and the pre-issue checks stop a report that doesn't.
Who issues a report from made. Shield?
A named person in your organisation issues every made. Shield report, after their review. The issued PDF is digitally certified with your organisation's digital ID.
Your organisation can require a second approver. The AI and connected assistants can only submit a report for approval.
Can board members see made. Shield without changing anything?
Yes. made. Shield has a read-only board access level: directors see posture, programmes, findings, actions and issued reports, but not drafts, working notes or personal information.
Administrators set a director's access before inviting them, so they never have write access, even briefly.
How can an auditor check a made. Shield report?
An auditor can check a made. Shield report's digital certification in any PDF reader, and check its evidence trail with the evidence pack you give them, without signing in.
Members of your organisation can also verify any issued report inside Shield by its reference or by uploading the file.
Does made. Shield submit anything to a regulator?
No. made. Shield prepares a document ready for you to submit; it doesn't lodge anything with a regulator.
Your organisation decides what to notify and submits it through the regulator's own process.