> For the complete documentation index, see [llms.txt](https://surecloud.gitbook.io/surecloud-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://surecloud.gitbook.io/surecloud-docs/documentation/gracie/what-gracie-can-do.md).

# What Gracie Can Do

Beyond basic chat, Gracie can consult personas, review documents, analyse records, and automate repeatable GRC work.

## What Gracie Can Do

Gracie does more than answer chat prompts. She can work with live SureCloud data, analyse supporting content, and follow relationships across records.

That makes Gracie useful for day-to-day GRC work, not only one-off questions.

{% hint style="info" %}
Gracie is permission-aware. She can only read, create, update, link, or analyse content the current user can already access in SureCloud.
{% endhint %}

### Core capabilities

Gracie can work across a broad set of tasks in SureCloud.

{% tabs %}
{% tab title="Work with records" %}
Gracie can search, summarise, create, update, link, unlink, and review records where those actions are available.

That includes questionnaires, comments, tasks, evidence, linked records, and synced files.
{% endtab %}

{% tab title="Analyse data" %}
Gracie can work with dashboards, reports, charts, CCM tests, and record summaries.

She can compare results, explain failures, surface trends, and trace an answer back to the supporting data.
{% endtab %}

{% tab title="Support admin work" %}
Where permissions allow, Gracie can also work with applications, workflows, views, tables, option lists, frameworks, hierarchies, roles, groups, users, and notifications.

This helps with controlled admin and design tasks as well as front-line record work.
{% endtab %}
{% endtabs %}

### Consult personas

Gracie can answer through specialist personas when you want a clear point of view, not just a summary.

That includes Risk, Compliance, Security, Privacy, Business Continuity, and Internal Audit.

You can ask one persona directly.

You can also use **Ask the Team** to route one question to the most relevant personas and get a synthesised answer.

This is useful when the decision needs judgement from more than one discipline.

### Review documents

Gracie can analyse documents synced into SureCloud through **FileSync**. She can also analyse files uploaded directly into chat.

Typical examples include SOC 2 reports, ISO certificates, policies, and supplier contracts.

Common prompts include:

* *"Summarise the controls covered in this SOC 2 report."*
* *"Does this policy mention data retention over 7 years?"*
* *"Compare last year's ISO 27001 certificate with this year's."*

{% hint style="info" %}
Gracie reads the document in place. You do not need to download it or paste the contents into chat.
{% endhint %}

{% embed url="<https://www.loom.com/share/794d729286984bcd87fab4293b709dcf>" %}

### Analyse questionnaires

Gracie understands questionnaire structure, including questions, answers, scores, and attachments.

That lets her:

* Summarise key risks in a third-party questionnaire.
* Flag answers that conflict with attached evidence.
* Compare answers across similar questionnaires.

### Work with CCM tests

Gracie can read CCM test configurations, results, and evidence. Where permissions allow, she can also update those records.

This is useful for audit preparation and failed control investigations.

{% hint style="success" %}
Gracie can only update CCM tests when the current user already has permission to do so.
{% endhint %}

### Follow linked records

Records in SureCloud rarely stand alone. Risks link to controls. Controls link to tests. Tests link to evidence.

Gracie uses those relationships when retrieving and analysing data. That lets her answer questions that span multiple records.

* *"For every high risk in Finance, list the controls mitigating it and the date of the last CCM test."*

Gracie can also suggest useful links. If she identifies a related record that is not yet linked, she can recommend that connection.

### Use skills and knowledge

Gracie can be extended through [Skills](/surecloud-docs/documentation/gracie/personas-skills-and-agents/skills.md). Each skill adds a specific capability, such as reviewing a document type or running a focused analysis.

Gracie can choose a matching skill from your request in plain language.

Users can also invoke available skills directly in chat. Type `/` to see the skills available to you.

Alongside skills, Gracie can also use a **Knowledge Base**. This provides structured reference content that both Gracie and AI Agents can use when forming responses.

{% columns %}
{% column %}

#### Skills Library

A managed set of capabilities Gracie can call when needed. Admins control which skills are available in the tenant.
{% endcolumn %}

{% column %}

#### Knowledge Base

Reference content that Gracie and AI Agents can use to produce more grounded responses.
{% endcolumn %}
{% endcolumns %}

See [Skill and Persona Reference](/surecloud-docs/documentation/gracie/personas-skills-and-agents/skill-and-persona-reference.md) for the current catalogue.

### Keep conversation context

You can start a conversation in one part of SureCloud and continue it somewhere else. Gracie carries enough context forward that you do not need to restate your work every time you switch screens.