Nothing an AI assistant sends to Diri reaches a register on its own. It arrives as a package in the review queue under Import & AI, and a person decides. Packages from the import wizard, when someone chooses Send for review, arrive in the same queue.
Why this matters: risk and compliance data carries decisions – who owns a treatment, what satisfies a control, how high a risk is. Those decisions stay with people. The AI does the reading, drafting and bookkeeping; a person decides.
Open Import & AI in the left-hand menu. A number on the menu item shows how many packages are waiting for review.
Each package shows who sent it and where it came from, for example "via Claude" or "via import wizard".
Diri holds back rows it won't write on its own rules, and names each one with the reason, for example:
If a published package turns out to be wrong, open it on the History tab and choose Revert this import. Records it created go to the archive for deletion (restorable there for 30 days), records it changed are put back as they were, and anything edited since is left alone and named. An approval or signature that publishing retired is not restored: the assessment must be signed or approved again.
When a connection is allowed to make suggestions, the AI can file ranked improvement ideas instead of changes, for example a control that lacks evidence, a duplicate threat, or a treatment without an owner. A suggestion changes nothing. On the Suggestions tab, for each one you can:
Suggestions about your own records also show up in My Workspace.