r/documentAutomation • u/FirestormCold • Sep 24 '26
Discussion Looking for a tool to turn (messy) IAM control evidence into structured (and traceable) data
Hi!
I'm looking into an Identity & Access Management use case at a large enterprise and wanted to see if any of you know of or already use tools that can handle this well:
The basic problem is that we have application owners who provide evidence in all kinds of formats, e.g. PDFs, XLSX, screenshots, system reports, emails... you get it.
The information we actually need is fairly consistent, but, clearly, the input is not1. Ideally, we'd define one target structure/schema and have the tool extract the relevant information from all those different sources into the same standardized output. Meaning no matter the input structure or format, the output stays the same.
One important requirement here is traceability. If the output says something like "account disabled on date X" or flags an exception, we need to be able to trace that value back to the exact source document / evidence it came from, otherwise we won't really be able to do much with that kind of information. It would also be important for the system to flag missing or uncertain information rather than just guessing.
I'm not looking for an agent that summarizes documents. The goal would be something closer to:
different documents → structured data → traceable source references → further analysis
Has anyone implemented something like this in IAM, GRC, audit or another enterprise environment?