Onspring Rolls Out AI Agents to Automate Rule‑Driven GRC Tasks

Onspring is pushing AI deeper into the core of governance, risk and compliance operations with a new agent-based upgrade designed to automate rule-driven work across its platform—without sacrificing oversight.

Announced today from Overland Park, Kansas, the latest phase of Onspring AI shifts the technology from a passive assistant to an active agent capable of executing workflows, reviewing documentation and making contextual decisions based on administrator-defined rules.

The company positions this evolution as a direct response to the trust barriers slowing enterprise AI adoption. Onspring’s 2026 GRC Benchmarking Report found that teams see the strongest near-term value in reducing repetitive administrative work, yet concerns around control, fragmented workflows and inconsistent results continue to hold organizations back. By allowing admins to set boundaries and deploy vetted prompts across environments, Onspring aims to deliver automation that is both powerful and governed.

Ryan Lougheed, Vice President of Platform at Onspring, said the upgrade was built to address the industry’s biggest hesitation head-on. He emphasized that every automated action remains visible, auditable and tied to rules defined by the organization. The assistant now lives on every screen, pulling intelligence from every record and application to support decisions across audits, assessments, incidents and third-party workflows.

Powered by Anthropic’s Claude, Onspring AI handles search, analysis and configuration tasks, reviewing documents the moment they’re attached, surfacing control gaps, generating follow-ups and comparing policies against internal standards. The company says these capabilities can cut multi-day workflows down to minutes, acting as a “tireless teammate” that frees practitioners to focus on judgment calls and strategic work.

With nearly half of GRC programs still experimenting with AI, Onspring’s agentic approach aims to break down data silos and unify risk insights across the enterprise. Leadership fears of “rogue AI” are addressed through strict governance controls, ensuring consistency and scalability without relinquishing oversight.

Lougheed noted that the goal is not to replace human decision-making but to build a routine of governed action—letting AI handle the mundane while people handle the meaningful.