Get started with the AI copilot

The AI copilot gives you two things: answers grounded in the Swedish legal texts and MSB regulations, and drafts built from your own controls and evidence. The result is a copilot that can scope your obligations, write your documentation, and answer your customers' security questionnaires, with citations you can verify.

New to the platform? Why OptiTech? explains how frameworks, controls, and evidence fit together. For a hands-on walkthrough of the Console, see Tour the OptiTech Console.

Before you start

You'll need:

• An OptiTech account with the onboarding wizard completed, so the copilot knows your industry, size, and systems
• The AI copilot is included on the Professional and Enterprise plans; see plans

1. Ask a scoping question

   Open the copilot from any page in the Console and ask in plain Swedish or English:

   Omfattas vi av NIS2?

   The copilot answers based on the legal text and your own onboarding data: which law applies, which entity category you fall into, and why. Every claim links back to the paragraph it's based on, so you can check the source before you act.

   Good first questions:

   • Does NIS2 apply to us, and are we an essential or important entity?
   • What's missing before we're ready for an ISO 27001 certification audit?
   • Which of our vendors fall under DORA's ICT requirements?

2. Draft a document

   Ask the copilot to draft a policy:

   Draft an incident response plan based on our environment

   The draft pulls facts from your integrations: your real systems, your real MFA status, your real backup routine. It's written in the formal Swedish that authorities and auditors expect, and it lands in your review queue. Nothing publishes without your approval.

3. Answer a questionnaire

   When a customer sends a security questionnaire, upload the file (Excel, Word, or a portal export) and ask:

   Answer this questionnaire based on our verified controls

   The copilot drafts answers from your control status and evidence, flags the questions it can't answer confidently, and leaves the final review to you. What used to take 10 to 20 hours per questionnaire becomes a review pass.

How the copilot stays trustworthy

• Citations, not confidence. Answers link to the legal text and to your own evidence.
• Human review built in. Drafts always go through your approval workflow.
• EU-hosted models. No customer data is sent to US-based AI providers.
• Not legal advice. The copilot helps you work faster; your legal review process still applies.

What's next

• Tour the OptiTech Console
• Our product principles
• OptiTech plans