LtO Assistant
A legal & compliance platform for BASF's Managing Directors — compliance task assignment, meeting scheduling, an AI chatbot over the corporate rule base, and a global risk heat map, in one system.
"License to Operate" compliance at BASF meant Managing Directors juggling topic assignments, stakeholder follow-ups, risk assessments, and meeting coordination across email, calendars, and Confluence pages. Nothing was in one place, nothing had an audit trail, and scheduling a single compliance meeting meant checking half a dozen calendars by hand.
MD Interaction Model
The core engine: MDs assign compliance topics to stakeholders, attach contracts and policies, and track every item to resolution. Every change lands in a full audit history, with restore, so any prior version of a task can be brought back.
Scheduling via Microsoft Graph
Searches BASF meeting rooms, checks availability across multiple calendars, and creates, edits, and sends invites with attachments, without leaving the platform.
AI Confluence bot
A chat interface over BASF's "Corporate Rule Base" Confluence space, through a custom API integration. MDs ask compliance questions in plain language instead of digging through wiki pages.
Risk assessment & heat map
Structured risk-assessment workflows plus a global heat map (Azure Maps) that surfaces compliance risk geographically.
Ownership transfer
When an MD's responsibilities change hands, a dedicated module transfers all their compliance data to the successor, with its own transfer history. Plus legal-entity management, document storage, global search, and notifications.
NestJS backend with Prisma, split into clean modules: auth (SAML SSO plus Microsoft Graph OAuth), the MDIM task engine, audit history, the Confluence bot, legal entities, transfers, notifications, and search. Response caching and rate-limiting where it matters.
React + TypeScript frontend, feature-based: one folder per capability, so a platform this size stays navigable. Hosted on Azure with CI/CD, run by BASF's infra team; most other projects in the portfolio run on EC2 instances managed solo.
Have something this size to build?
Or something a tenth of the size — the process is the same.