Categories
Compliance Into the Weeds

Compliance into the Weeds: Chatbots and Interplay of Multiple Compliance Systems

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss the implications of artificial intelligence, specifically the use of chatbots in compliance programs.

Matt joins from Vilnius, Lithuania, where he is set to address a gathering of Baltic and Eastern European compliance professionals. The discussion centers on AI chatbots used for policy guidance, specifically addressing the ethical concerns and potential risks associated with tracking individual employee inquiries, as well as the possibility of violating whistleblower protection laws. Tom and Matt emphasize the importance of robust IT general controls and corporate culture in managing these new AI-powered compliance tools. They also address how regulators, like the Department of Justice, may evaluate the effectiveness of AI in compliance programs going forward.

Key highlights:

  • Exploring AI in Compliance
  • Chatbot Concerns and Whistleblower Anonymity
  • User Experience vs. Compliance Function Experience
  • Regulatory Expectations and Future of AI in Compliance

Resources:

Matt on Radical Compliance 

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred the Davey, Communicator, and W3 Awards for podcast excellence.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Amazon’s AI-Driven Supply Chain: A Compliance Blueprint

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

This week, we continue our look at how companies are using AI in their business operations and draw compliance lessons from this use for compliance professionals. Today, we continue with lessons from Amazon’s AI-Driven Supply Chain as a Compliance Blueprint.

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
Blog

Reimagining Compliance: What Happens When Every Risk Has an AI Assistant?

In the not-so-distant past, corporate compliance programs relied on checklists, policies, and manual monitoring. The work was often reactive, responding to investigations, answering hotline calls, or conducting after-the-fact audits. But a quiet revolution is underway, and it’s reshaping how compliance teams operate. At the forefront of that change is konaAI’s “Agent Persona Development” framework, an AI-first approach that builds digital compliance assistants to manage and integrate every aspect of the compliance function. (Full disclosure-I do consulting work with KonaAI.)

Think of it as a digital compliance department. Yet one that specialized in AI “agents’ power,” each designed for a specific compliance function: investigations, vendor risk, sales monitoring, hotline activity, culture analytics, and policy management. Together, they do not simply automate tasks. These agents collaborate, connect, and learn from each other to create a dynamic, adaptive compliance ecosystem.

From Silos to Systems: A Unified Compliance Architecture

Every compliance officer knows the pain of siloed data. Investigations live in one platform. Vendor risk data lives in another. Hotlines in yet another. The result? Compliance professionals spend more time assembling the puzzle than interpreting its meaning.

The agentic compliance model solves this problem by connecting all data sources into a single, coordinated team. Each agent, here named Stan, Linda, Sonny, Raquel, Penny, Eva, and Lohitha, specializes in a domain but operates as part of an integrated system. The connective tissue between them is data intelligence and coordination.

Imagine Stan, your Investigations Assistant, flagging a conflict-of-interest case that ties to a vendor relationship. That information is instantly shared with Linda, your Vendor Risk Assistant, who analyzes the vendor’s compliance history, transaction monitoring data, and third-party risk profile. Meanwhile, Raquel, the Hotline Assistant, tracks if related reports have surfaced through the speak-up channel. The result of all this? A holistic view of compliance risk is automated, cross-referenced, and proactive.

Stan: The Investigations Assistant

Stan embodies what every compliance investigator aspires to be. An intelligent aide who never sleeps, forgets, or misses a data point. Stan integrates internal and external data sources, including company policies and investigation databases, with the DOJ’s 2024 ECCP, ACFE materials, and COSO’s Fraud Risk Management Guide.

Ask Stan a question, such as, “Show me all open investigations that may create FCPA exposure.” From this, he provides a risk-ranked summary that includes historical parallels, policy context, and regulatory benchmarks. He can even prepare a work plan aligned with your company policy and external best practices from the DOJ or ACFE. Stan does not simply collect data; he contextualizes it. He helps compliance officers investigate smarter, not harder.

Linda: The Vendor Risk Assistant

Third-party risk remains one of the most persistent challenges in compliance. Linda, your Vendor Risk Assistant, takes this problem head-on. Her expertise spans due diligence, pre-approvals, contract compliance, and ongoing transaction monitoring. She integrates with internal vendor systems, third-party management databases, and external compliance resources to assess exposure in real-time.

The beauty of Linda’s design lies in its adaptability. She tailors due diligence workflows by vendor type, whether a distributor, reseller, or agent, and ensures that every onboarding process meets both regulatory and internal standards. For compliance officers, this means never again wondering if a new vendor slipped through without being properly screened. With Linda, every vendor relationship becomes traceable, accountable, and continuously monitored.

Sonny: The Salesforce Monitoring Assistant

Compliance risks do not only lurk in third parties; they also reside within the sales process. That is where Sonny, the Salesforce Monitoring Assistant, enters. Sonny watches for anomalous discounts, returns, or contract terms that deviate from policy or suggest improper inducements. He can correlate sales behavior with AML data, customer risk ratings, or unusual payment timing, flagging red flags before they turn into violations. In industries where sales velocity can outpace oversight, Sonny acts as a digital compliance co-pilot, ensuring every deal passes the smell test.

Raquel: The Hotline Monitoring Assistant

Your hotline is only as strong as your ability to interpret what comes through it. Enter Raquel, your Hotline Monitoring Assistant. She provides real-time visibility into speak-up data, tracking status updates, response times, and patterns in report types. She can identify trends, such as an uptick in retaliation claims or conflicts-of-interest reports in a specific region, and alert compliance to investigate systemic issues. Raquel not only manages data; she transforms it into insight. She makes the hotline an accurate intelligence tool rather than a reactive mechanism.

Eva: The Policy and Compliance Assistant

Every compliance team fields the same daily questions: Can I accept this gift?, Do I need pre-approval for this travel?, Is this vendor on the restricted list? Eva, the Policy and Compliance Assistant, is responsible for addressing these inquiries. She utilizes generative AI to interpret company policies and provide real-time guidance tailored to role, geography, and transaction context. In essence, Eva decentralizes compliance expertise, making every employee a click away from the right decision. For global organizations, she’s a force multiplier for consistency and confidence.

Penny: The Culture and Survey Assistant

Culture remains one of the most elusive compliance metrics, until now. Penny, the Culture and Survey Assistant, turns employee feedback and social sentiment into measurable insights. She monitors survey results, internal communications, and social media signals to identify cultural trends and shifts in sentiment. Penny can even draft company social posts aligned with tone and messaging history, supporting transparent internal communication strategies. For Chief Compliance Officers, Penny provides what was once impossible: a real-time view of organizational ethics and morale.

Lohitha: The Data Insights and Coordination Assistant

Finally, Lohitha is the bridge that unites the entire agentic team. Her job is to break down data silos and cross-reference insights across all assistants. She identifies hidden correlations, such as the relationship between vendor risk issues flagged by Linda, policy exceptions logged by Eva, and hotline reports tracked by Raquel. Her analytics uncover patterns no human team could process in time. For compliance leaders, Lohitha’s coordination represents the holy grail: turning fragmented data into a unified risk narrative.

The Compliance Function of the Future: Agentic, Integrated, and Ethical

What does all this mean for the modern compliance professional? It means the days of reactive compliance are coming to an end. The agentic model transforms compliance from a back-office function into a strategic command center, powered by automation, analytics, and cross-functional insight.

It also raises the bar for governance. With such power comes a responsibility to ensure transparency, fairness, and accountability in the use of AI. Compliance must now govern the very tools that help it govern others. In short, the compliance officer of tomorrow will be both an ethicist and an engineer.

A Compliance Team That Never Sleeps

Imagine logging into your compliance dashboard tomorrow morning.

  • Stan has summarized last week’s investigations and flagged new DOJ-relevant trends.
  • Linda has updated your third-party risk heat map.
  • Sonny has identified unusual discount patterns in the Asia-Pacific region.
  • Raquel has summarized the hotline activity.
  • Eva has answered 300 employee policy queries in a single overnight shift.
  • Penny has mapped sentiment drops in one division.
  • And Lohitha has tied it all together into one narrative for your following board report.

This is not a compliance dream; rather, it is the next generation of AI-empowered governance. By adopting this model, compliance not only keeps up with change, but it leads it.

Final Thoughts

The Agent Persona Development model reimagines what those teammates can look like. Each persona represents a fusion of domain expertise, automation, and human insight working together to create a compliance program that is intelligent, scalable, and truly integrated. The bottom line has always been that compliance is not about checking boxes. It is about operationalizing compliance into business excellence. And with the right AI teammates, excellence is now within reach 24/7.

Categories
Upping Your Game

Upping Your Game: Episode 9 – Leveraging Chatbots for Enhanced Compliance Efficiency

In February, the Trump Administration suspended investigations under and enforcement of the FCPA. Many compliance professionals have since wondered what this will mean for corporate compliance programs going forward. Hui Chen challenged compliance professionals with the statement, “It’s time to up your game.”

This podcast series, sponsored by Ethico and co-hosted with Ethico co-CEO Nick Gallo, hopes to meet Hui Chen’s challenge. We will discuss how compliance professionals can ‘Up Their Game’ by utilizing currently existing Generative AI (GenAI) tools to significantly improve their compliance programs. As compliance professionals, it is critical to recognize that this moment is not merely about incremental improvements but about elevating our profession to an entirely new level of effectiveness, efficiency, and organizational value.

In this episode, Tom and Nick discuss the rising use of chatbots in corporate compliance programs. They explore how chatbots can serve as a powerful tool for addressing policies, procedures, and FAQs, thereby increasing efficiency and reducing the burden on compliance departments. The conversation explores the benefits of chatbots, including improved data collection, enhanced consistency, and democratized access to information. They also discuss practical strategies for implementing chatbots, including focusing on specific use cases, maintaining human oversight, rigorous testing, and continuous improvement. Real-world examples from both large corporations and smaller entities illustrate the practical applications and significant advantages of adopting chatbot technology in compliance operations.

Key highlights:

  • Implementing Chatbots for Internal Use
  • Benefits and Challenges of Chatbots
  • Building Effective Chatbots
  • Meeting Employees Where They Are
  • Ethico’s Approach to Chatbots

Resources:

Upping Your Game-How Compliance and Risk Management Move to 2030 and Beyond on Amazon.com

Nick Gallo on LinkedIn

Ethico

Tom Fox

Instagram

Facebook

YouTube

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Compliance Lessons from Shell

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

This week, we begin a look at how companies are using AI in their business operations and draw compliance lessons from this use for compliance professionals. Today, we continue with lessons from Shell Oil Company.

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
Innovation in Compliance

Innovation in Compliance: Mastering Compliance Branding on LinkedIn: Insights from Carol Kaemmerer

Innovation comes in many areas, and compliance professionals need to be ready for it and embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, Tom Fox is joined by returning guest Carol Kaemmerer, author of ‘LinkedIn for the Savvy Executive.’

Carol shares valuable insights on how compliance professionals can leverage LinkedIn to build their personal brand and gain credibility with senior management. She introduces her Brilliance Framework, which includes strategies such as leading with authenticity, utilizing the rule of three for memorable branding, maximizing digital real estate, and emphasizing the importance of engagement. Tune in to enhance your LinkedIn strategy and make a lasting impression in your career.

Key highlights:

  • Building a Compliance Professional’s Brand
  • Reframing Compliance Communication
  • Introducing the LinkedIn Brilliance Framework
  • Maximizing LinkedIn’s Digital Real Estate
  • The Importance of Visuals on LinkedIn
  • Engagement: The Gold of LinkedIn

Resources:

Carol Kaemmerer on LinkedIn

Carol Kaemmerer ⁠Website

LinkedIn for the Savvy Executive Second Edition

The LinkedIn Brilliance Framework™: Amplify Your Professional Presence

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Compliance Lessons Uber

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

This week, we begin a look at how companies are utilizing AI in their business operations and draw compliance lessons from this use for compliance professionals. Today, we start with lessons from Uber.

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
FCPA Compliance Report

FCPA Compliance Report – Pat Poitevin on Transforming Corporate Compliance: Leveraging AI and Building Ethical Cultures

Join Tom Fox as he welcomes Pat Poitevin, a compliance veteran with extensive experience in enforcement, consulting, and academia. Pat shares his professional journey, beginning with his work at the Royal Canadian Mounted Police (RCMP), and discusses the importance of establishing strong ethics and compliance cultures within organizations. He emphasizes the role of AI in transforming compliance functions and enhancing the effectiveness of risk management. Pat also touches on the future of compliance, talent acquisition, and the impact of technology on business ethics. The conversation offers valuable insights for compliance professionals looking to refine their programs and align them with business strategies for sustained growth.

Key highlights:

  • Current Projects and Focus Areas
  • Building a Strong Ethics and Compliance Culture
  • Leveraging AI in Compliance
  • Compliance Strategies for Geopolitical and Technological Changes
  • Balancing Policies and Human Behavior
  • Future of Compliance and Technology

Resources 

Pat Poitevin

🔸 LinkedIn: Pat Poitevin

🔸 Consulting Firm: Active Compliance and Ethics Group (ACEG)

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on the use of AI in Compliance programs, my new book, Upping Your Game. You can purchase a copy of the book on Amazon.com

Categories
Blog

Courageous Leadership in an Era of Disruption: Compliance Lessons from Brené Brown

The New York Times (NYT) recently published an interview with Brené Brown, best known for her TEDx Talk on “The Power of Vulnerability.”  Her TEDx Talk focused on individuals. Brown is now using those concepts as a basis for work in the corporate world. Many of the concepts she discussed in this interview directly apply to a Chief Compliance Officer (CCO) and corporate compliance function. In this article, I will summarize the key themes of Brown’s discussion and draw out five critical lessons for compliance professionals navigating today’s turbulent environment.

The world of corporate compliance does not exist in a vacuum. Every day, compliance professionals work within organizations facing extraordinary pressures: disruptive technologies, geopolitical instability, shifting marketplaces, and evolving workforce expectations. Against this backdrop, Brené Brown, renowned researcher on shame, vulnerability, and courage, has turned her attention to leadership in corporate, nonprofit, and even military contexts. Her latest reflections provide timely insights not just for executives, but for compliance professionals tasked with guiding organizations through uncertainty.

Brown’s message is clear: in moments of disruption, the quality of leadership matters more than ever. She challenges us to think about courage, vulnerability, and clarity not as “soft skills,” but as the very foundation of sustainable organizational performance. For the compliance professional, her work resonates deeply. After all, compliance is fundamentally about behavior, how people act under pressure, how they respond to risk, and how organizations foster cultures of accountability and trust.

The Pace of Change and the Trap of Fear

Brown describes today’s business climate as a “supercycle” of unprecedented change. Artificial intelligence, geopolitical instability, and economic volatility create a sense of scarcity, a nagging feeling that organizations lack sufficient time, resources, or talent to keep up. For compliance leaders, this context should feel familiar. When regulations shift overnight or enforcement priorities change, fear and reactive decision-making often follow.

Brown cautions against “action over impact,” where leaders rush to act without pausing to assess whether their actions are aligned with strategy. For compliance, this is the difference between a carefully calibrated monitoring program and a scattershot set of controls that look good on paper but fail in practice. Strategic urgency, not blind urgency, must guide the compliance function.

Courage, Accountability, and Human Leadership

At the heart of Brown’s research is the idea that courage, not technical expertise alone, is the limiting factor in organizational performance. Across industries, she found leaders struggling to have hard conversations, to hold others accountable, and to resist blame and shame.

For compliance, this insight hits home. We have all seen organizations where misconduct festers because leaders fear confrontation, or where accountability is deflected onto “bad apples” instead of being addressed systemically. Brown reminds us that courage means leaning into discomfort, whether that’s delivering difficult feedback, shutting down toxic behavior, or confronting senior leaders when ethical lines are at risk of being crossed.

Communication as a Compliance Tool

Brown describes good communication as rooted in clarity, discipline, and accountability. It requires vulnerability, honesty, and a willingness to tolerate discomfort. In her words, “A brave life is basically 15 hard conversations a day.” Compliance professionals should take note. Too often, compliance messages are dulled by legal jargon or buried in training modules that merely check the box without creating a genuine understanding. Effective compliance communication is not about volume, but clarity — stating expectations plainly, reinforcing them consistently, and holding both leaders and employees accountable when those expectations are not met.

When compliance officers avoid difficult conversations, whether with business leaders, employees, or regulators, they fail in their role as stewards of integrity.

Generational Shifts and the “Why” Question

Another theme Brown highlights is the growing demand from younger generations to understand the “why” behind organizational decisions. Gen Z, in particular, tends to resist following orders blindly. They ask questions, challenge assumptions, and expect transparency.

For compliance, this is an opportunity, not a threat. When employees ask “why,” they create space for dialogue about risk, ethics, and accountability. If handled well, these conversations can strengthen the compliance culture. If dismissed or ignored, however, they can morph into conflict and disengagement. Compliance professionals must equip themselves and their organizations with the skills to turn task conflict into innovation, rather than emotional conflict that fractures teams.

The Decline of Fear-Based Leadership

Brown pushes back against the notion that fear-driven leadership, exemplified by mass layoffs or authoritarian management, produces sustainable performance. Fear may yield quick results, but its shelf life is short. To maintain fear as a motivator, leaders must repeatedly demonstrate cruelty, which corrodes trust and drives talent away.

Compliance programs grounded in fear face the same limitation. Employees may comply out of fear of punishment in the short term, but over time, they disengage, seek ways to evade controls, or leave the organization entirely. Sustainable compliance requires trust, fairness, and accountability, not periodic shows of cruelty.

Five Key Takeaways for the Compliance Professional

1. Strategic Urgency Over Panic

In times of disruption, resist “chicken with your head cut off” urgency. Compliance programs must prioritize thoughtful, strategic action over quick fixes that create the illusion of progress without real impact.

2. Courage as the Compliance Differentiator

Having hard conversations, holding people accountable, and confronting uncomfortable truths are the core of both leadership and compliance. Technical expertise matters, but courage drives results.

3. Communication Builds Trust

Effective compliance communication requires clarity, discipline, and accountability. Don’t hide behind jargon or check-the-box training. Say what needs to be said, even when it’s uncomfortable.

4. Harness the Power of ‘Why’

Younger employees demand transparency and reasoning. Use this as a lever to build stronger compliance cultures. Equip leaders to turn questions into opportunities for education, engagement, and innovation.

5. Reject Fear-Based Models

Fear is a short-term motivator with long-term costs. Compliance programs grounded in trust, fairness, and respect will outperform those that rely on punishment and intimidation.

Compliance Lessons in Courage

Brené Brown’s reflections on leadership are not abstract musings. They speak directly to the challenges compliance professionals face in guiding organizations through uncertainty, disruption, and cultural change. At its core, compliance is about shaping behavior and building cultures of integrity. That work requires courage, clarity, and compassion, which are precisely the traits Brown identifies as the hallmarks of effective leadership.

As we look ahead to the next wave of regulatory change, technological disruption, and workforce transformation, compliance officers must resist the temptation to react out of fear. Instead, we must embrace courageous leadership that aligns action with impact, values clarity over noise, and treats people with humanity even in moments of adversity.

Brown’s work reminds us that compliance is not just about preventing wrongdoing; it is also about promoting ethical behavior. It is about cultivating courage and clarity in organizations so that, when disruption hits, leaders and employees alike know how to “settle the ball,” take a breath, and make the right play.

Categories
Popcorn and Compliance

Popcorn and Compliance: Episode 1 – Frankenstein’s Lab: Five Compliance Lessons: Ambition, Accountability and Organizational Culture

Welcome to a special series of Popcorn and Compliance. In this series, we will examine the Classic Universal Monster Movies from the 1930s and 1940s, mining them for compliance lessons. (Yes, it really is an excuse to rewatch them all.) In this series, we will look at Frankenstein, Dracula, The Wolf Man, The Mummy, and end with The Invisible Man. In this first episode of our special 5-part series, we consider compliance lessons drawn from the classic 1931 film ‘Frankenstein,’ starring Boris Karloff.

Exploring Henry Frankenstein’s unchecked ambition and lack of oversight, Tom and his AI co-hosts, Timothy and Fiona, extract five crucial compliance lessons: the necessity of setting boundaries for ambition, the importance of un-delegatable accountability, the profound impact of corporate culture on employee behavior, the need for constant reassessment of emerging risks, and the importance of crisis preparedness. These lessons offer profound insights for today’s professionals on how to navigate modern corporate compliance challenges effectively.

Key highlights:

  • Frankenstein’s Monster: Ambition Without Boundaries
  • The Importance of Oversight and Accountability
  • Corporate Culture and Its Impact
  • Continuous Risk Reassessment
  • Crisis Management: Preparation Over Panic

Resources:

Compliance Lessons from Boris Karloff’s Frankenstein on the FCPA Compliance and Ethics Blog

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn