InternalHalden Group staff onlyA staff-facing chatbot
Halden GroupComplianceFinancial services group · London
The compliance assistant for Halden Group staff
Verity.
Answers from the policy, cites the clause.
Verity is Halden Group’s internal compliance assistant. Staff ask what a policy says and it answers from the policy library with clause-level citations (policy, clause and version date), then does the paperwork: the gifts register, conflict declarations and data-incident reports to the DPO. A whistleblowing concern switches it into protected mode, where nothing it records identifies the person speaking up.
3 example conversations
01
What Verity does for Halden Group
Six jobs a compliance team does every week, done in the chat, written to the right register and left on the record. Each picture below is drawn from what the demo’s own tools return.
01
Answers with the clause, not a paraphrase
Verity searches Halden’s policy library and reads every clause it relies on before citing it by policy, clause and version:
Gifts & Hospitality clause 4.2 (v4.1)
. If no clause covers a question it says so, and offers a person rather than a guess. Each clause it reads lands in the audit trail with the version it quoted.SystemPolicy library · 5 policies, 24 clauses
Brightwater Systems have offered me two Wimbledon tickets for next summer, about £400 for the pair. Am I OK to accept?
Verity
Not yet. Two clauses decide this.
- 4.2Over £100 needs pre-approvalGifts & Hospitality · v4.1
- 4.5Nothing during a live tenderGifts & Hospitality · v4.1
Citation logged with its version · HG-POL-07 · effective 1 March 2026
02
Keeps the gifts register, and its rules
Every offer is logged, accepted or declined. The register applies the policy itself: up to £100 is logged, over £100 becomes a request for the line manager and Compliance to approve, and nothing from a bidder in a tender the employee is judging, and no cash or voucher, can be recorded as accepted at all. The rule lives in the register, so the model cannot talk its way past it.
SystemGifts register
Gifts register · HG-POL-07
£100 · clause 4.2£35£160£400- £35Box of chocolatesclientLoggedGR-2026-0393
- £160Client dinnerclientPre-approvalGR-2026-2574
- £400Wimbledon ticketsbidder in your tenderDeclinedGR-2026-5889
Clause 4.5 (live tender, you have a role): the register will not record it as accepted
03
Takes conflict declarations
A family tie to a bidder, a shareholding, an outside directorship: Verity records the declaration and notifies the line manager and Compliance. If the employee is part of a current decision that touches it, they are told to step back until Compliance confirms how the conflict will be managed.
SystemConflicts register
My sister is a partner at Calder & Webb, which is pitching for our audit contract.
Conflict declaredlogged
ReferenceCI-2026-8945
- Nature
- family or close relationship
- Relates to
- Calder & Webb LLP
- In a decision now
- Yes
- Notified
- Your line manager and Compliance
Step back from the decision until Compliance confirms (clause 3.4)
04
Starts the 72-hour clock on a data incident
Client data in a personal mailbox is a potential breach. Verity gives the containment steps first, then opens an incident with the DPO, rates its severity from the data and the number of people, and works out the ICO deadline from the minute the employee realised. A report that arrives after the window is flagged as late. The tone stays no-blame, because the policy is.
SystemIncident management
IncidentDPI-2026-4605Severity HighContained
- 0 hTue 13 Oct09:40 · aware
- 24 hWed 14 Oct
- 48 hThu 15 Oct
- 72 hFri 16 OctICO decision due
The DPO decides whether the ICO is told (clause 7.3) · due Fri 16 Oct 2026, 09:40
05
Protected mode for whistleblowing
A concern about wrongdoing switches the chat into protected mode before Verity asks a single question: nothing after that point is linked to the staff ID, Speak Up searches are logged without their words, and the widget turns charcoal so the person can see it happen. The anonymous case has no field for a name, and obvious identifiers (email addresses, phone numbers, staff IDs, a stated name) are stripped from the summary before filing. A concern about the reporter’s own manager is routed round their reporting line. Verity never investigates.
SystemSpeak Up (independent) · Audit log
Protected mode · not linked to your staff ID
Anonymous caseSU-YHLT-59
- Reporter
- Not recorded
- Routed to
- Whistleblowing Champion (non-executive director)
- Your management line
- Excluded (clause 5.2)
Summary as filed
My name is removed and my email is removed. Expense claims are being split to stay under the approval limit.
06
Knows where its answers stop
Legal questions, requests for an exception and anything a policy does not settle go to a named compliance officer, written out in full so nobody has to ask twice; the queue turns away one-line hand-offs. Data protection goes to the DPO, personal dealing to Markets compliance, and an urgent question gets a call within the hour.
SystemCompliance queue
Passed to Complianceescalated
ReferenceCQ-2026-5745
- Officer
- Priya Raman, Compliance Officer
- Topic
- legal question
- Reply by
- Wed 14 Oct 2026, 17:30
Routing
- Data protectionHannah Osei, DPO
- Personal dealingOwen Clarke, Markets
- Everything elsePriya Raman
Urgent: a call within the hour · one-line hand-offs are turned away
02
The rules it keeps
Verity’s standing rules. They hold whatever the person asking says, and the hard limits are enforced by the registers themselves, not by the model’s good intentions.
- 1
Answers only from Halden’s own policies. It reads each clause it relies on before citing it by policy, clause and version, and if no clause covers a question, it says so.
- 2
Gives no legal advice and grants no exceptions: legal questions, exception requests and anything the policy does not settle go to a named compliance officer.
- 3
Never lets a gift through that the rules forbid. Anything over £100 waits for pre-approval, and nothing is accepted from a supplier in a tender the employee has a role in.
- 4
Treats a possible data breach as urgent: containment steps first, an incident with the DPO straight away, and the 72-hour ICO clock stated plainly, without blame.
- 5
Whistleblowing goes into protected mode. It never asks for or records who is reporting, and never investigates: the case goes to the independent Speak Up channel.
03
Inside the demo
Three conversations on Halden Hub, the group intranet, each with the audit view open beside it: what Verity searched, which clause and version it cited, and what it wrote to which register. Every tool result in them comes from the demo’s own policy library and registers.
Conversation 01
Can I accept Wimbledon tickets?
“Brightwater Systems have offered me two Wimbledon tickets for next summer, about £400 for the pair. Am I OK to accept?”
A £400 offer from a supplier: Verity cites clauses 4.2 and 4.5, asks one question, logs the declined offer, and hands the legal follow-up to a compliance officer.
Run conversation 01Conversation 02
I emailed client data to my Gmail
“I emailed a client spreadsheet to my personal Gmail last night so I could finish a report at home. Is that a problem?”
A potential personal-data breach: containment steps first, an incident opened with the DPO, the 72-hour ICO clock stated plainly, and no blame.
Run conversation 02Conversation 03
My manager is backdating trades
“I think my manager is backdating trade confirmations to cover late bookings. I don’t know who to tell.”
Protected mode: no name asked for or logged, an anonymous Speak Up case routed round the reporting line, and no investigating of its own.
Run conversation 03
What to watchOffered £400 of Wimbledon tickets, Verity cites the £100 rule but asks one question first, and once it hears the supplier is in a tender the employee is judging, it will not route round clause 4.5: the offer is declined, logged, and the legal follow-up goes to a person.
04
Under the hood
8 tools, and a back office that holds Halden’s rules as plain code.
Tools
| Tool | What it does | System | Tier |
|---|---|---|---|
search_policy | Searching the policy library | Policy library | Reads |
get_clause | Reading the clause | Policy library | Reads |
log_gift | Logging it in the gifts register | Gifts register | Writes |
declare_conflict | Recording the declaration | Conflicts register | Writes |
open_incident | Opening an incident with the DPO | Incident management | Writes |
start_protected_mode | Switching to protected mode | Audit log | Writes |
open_speak_up_case | Opening an anonymous Speak Up case | Speak Up (independent) | Writes |
escalate_to_compliance | Passing it to a compliance officer | Compliance queue | Writes |
Runtime
- Model
- Built for Claude Opus 5.5
- Thinking
- Adaptive, at low effort, summarised for the audit view
Channels
- Halden Hub intranet widget
- Microsoft Teams chat
- Mobile intranet app
Built to connect to
- Policy library (SharePoint or a policy-management platform)
- Gifts & hospitality register
- Conflicts of interest register
- Incident management (e.g. ServiceNow)
- Independent Speak Up provider intake
- Write-once audit log store
None of these is connected here. This demo answers from a fictional policy library and registers held in memory.
Halden Hub · Tuesday 13 October 2026
See Verity work on the intranet.
A gift that has to be declined, a spreadsheet in the wrong inbox and a concern about a manager. Every search, citation and register entry is set out beside the chat, step by step.
3 example conversations