AI-assisted security review platform
An Excel-based security review rebuilt as a web workflow. AI drafts the findings, and a person still signs off on every one.
- Role
- Platform, UI/UX, workflow, data, integration
- When
- Jul – Sep 2026
- Built with
- Next.js, TypeScript, PostgreSQL, Drizzle, enterprise SSO, ExcelJS
- Team
- Governance lead · AI-backend engineer · me
The problem
Every AI project needed a security review before launch, done by filling in a long Excel checklist. Teams didn't know which items applied, reviewers judged differently, and evidence lived in email threads. More AI projects meant a bigger queue.
The workflow I designed
- 1
Intake
Project info and approvers in a guided form.
- 2
Evidence
Upload plans and specs, viewable in the app.
- 3
Review
AI drafts findings. A person edits, approves or sends back.
- 4
Report
The official Excel template, filled in automatically.
Decision: keep Excel as the output
The checklist file was the approval process.
Who built what
A team project with clear ownership.
My part
- Main web platform & UI/UX
- PostgreSQL schema
- SSO, documents, approvals
- Excel export, bilingual UI
Collaborators
- AI document-analysis backend
- Governance rules & priorities
Where it stands
Core review workflow, end to end.
Running in a restricted cloud environment for internal users.
Version-pinned checklists, so a later update can't silently change an existing review.
80%+ less checking effort. Not yet measured, so it's shown as a goal.
Excel wasn't just a file format. It was the approval process. The job was to keep the sign-off and remove the busywork around it.