# What Gracie Can Do

## What Gracie Can Do

Gracie does more than answer chat prompts. She can work with live SureCloud data, analyse supporting content, and follow relationships across records.

That makes Gracie useful for day-to-day GRC work, not only one-off questions.

{% hint style="info" %}
Gracie is permission-aware. She can only read, create, update, link, or analyse content the current user can already access in SureCloud.
{% endhint %}

### Core capabilities

Gracie can work across a broad set of tasks in SureCloud.

{% tabs %}
{% tab title="Work with records" %}
Gracie can search, summarise, create, update, link, unlink, and review records where those actions are available.

That includes questionnaires, comments, tasks, evidence, linked records, and synced files.
{% endtab %}

{% tab title="Analyse data" %}
Gracie can work with dashboards, reports, charts, CCM tests, and record summaries.

She can compare results, explain failures, surface trends, and trace an answer back to the supporting data.
{% endtab %}

{% tab title="Support admin work" %}
Where permissions allow, Gracie can also work with applications, workflows, views, tables, option lists, frameworks, hierarchies, roles, groups, users, and notifications.

This helps with controlled admin and design tasks as well as front-line record work.
{% endtab %}
{% endtabs %}

### Review documents

Gracie can analyse documents synced into SureCloud through **FileSync**. She can also analyse files uploaded directly into chat.

Typical examples include SOC 2 reports, ISO certificates, policies, and supplier contracts.

Common prompts include:

* *"Summarise the controls covered in this SOC 2 report."*
* *"Does this policy mention data retention over 7 years?"*
* *"Compare last year's ISO 27001 certificate with this year's."*

{% hint style="info" %}
Gracie reads the document in place. You do not need to download it or paste the contents into chat.
{% endhint %}

### Analyse questionnaires

Gracie understands questionnaire structure, including questions, answers, scores, and attachments.

That lets her:

* Summarise key risks in a third-party questionnaire.
* Flag answers that conflict with attached evidence.
* Compare answers across similar questionnaires.

### Work with CCM tests

Gracie can read CCM test configurations, results, and evidence. Where permissions allow, she can also update those records.

This is useful for audit preparation and failed control investigations.

{% hint style="success" %}
Gracie can only update CCM tests when the current user already has permission to do so.
{% endhint %}

### Follow linked records

Records in SureCloud rarely stand alone. Risks link to controls. Controls link to tests. Tests link to evidence.

Gracie uses those relationships when retrieving and analysing data. That lets her answer questions that span multiple records.

* *"For every high risk in Finance, list the controls mitigating it and the date of the last CCM test."*

Gracie can also suggest useful links. If she identifies a related record that is not yet linked, she can recommend that connection.

### Use skills and knowledge

Gracie can be extended through the [Skills Library](/surecloud-docs/documentation/gracie/skills-library.md). Each skill adds a specific capability, such as reviewing a document type or running a focused analysis.

In chat, users can invoke available skills with slash commands. Type `/` to see the skills available to you.

Alongside skills, Gracie can also use a **Knowledge Base**. This provides structured reference content that both Gracie and AI Agents can use when forming responses.

{% columns %}
{% column %}

#### Skills Library

A managed set of capabilities Gracie can call when needed. Admins control which skills are available in the tenant.
{% endcolumn %}

{% column %}

#### Knowledge Base

Reference content that Gracie and AI Agents can use to produce more grounded responses.
{% endcolumn %}
{% endcolumns %}

### Keep conversation context

You can start a conversation in one part of SureCloud and continue it somewhere else. Gracie carries enough context forward that you do not need to restate your work every time you switch screens.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/what-gracie-can-do.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.