LtO Assistant
A legal & compliance platform for BASF's Managing Directors — compliance task assignment, meeting scheduling, an AI chatbot over the corporate rule base, and a global risk heat map, in one system.
"License to Operate" compliance at BASF meant Managing Directors juggling topic assignments, stakeholder follow-ups, risk assessments, and meeting coordination across email, calendars, and Confluence pages. Nothing was in one place, nothing had an audit trail, and scheduling a single compliance meeting meant checking half a dozen calendars by hand.
MD Interaction Model
The core engine: MDs assign compliance topics to stakeholders, attach contracts and policies, and track every item to resolution. Every change lands in a full audit history — with restore, so any prior version of a task can be brought back.
Scheduling via Microsoft Graph
Searches BASF meeting rooms, checks availability across multiple calendars, and creates, edits, and sends invites with attachments — without leaving the platform.
AI Confluence bot
A chat interface over BASF's "Corporate Rule Base" Confluence space, through a custom API integration — MDs ask compliance questions in plain language instead of digging through wiki pages.
Risk assessment & heat map
Structured risk-assessment workflows plus a global heat map (Azure Maps) that surfaces compliance risk geographically.
Ownership transfer
When an MD's responsibilities change hands, a dedicated module transfers all their compliance data to the successor — with its own transfer history. Plus legal-entity management, document storage, global search, and notifications.
NestJS backend with Prisma, split into clean modules: auth (SAML SSO plus Microsoft Graph OAuth), the MDIM task engine, audit history, the Confluence bot, legal entities, transfers, notifications, and search. Response caching and rate-limiting where it matters.
React + TypeScript frontend, feature-based — one folder per capability, so a platform this size stays navigable. Hosted on Azure with CI/CD, run by BASF's infra team; most other projects in the portfolio run on EC2 instances managed solo.
Have something this size to build?
Or something a tenth of the size — the process is the same.