Studio meetings and Zoom join
Licensed agents already sit in the studio meeting. When Zoom is configured they join the numbered room as named participants. The board stays in the same session.
NEXGENTIC DELIVERY TEAM
Video rooms on a QSA clock.
VPods already puts licensed agents in Teams and Zoom. Next we put them on a calendar: PCI, HIPAA, SOC 2, and MITRE ATT&CK — the big guns — joining the room when the control window opens, not when someone remembers to type a name in chat.
Control calendar · Eastern Time
QSA fieldwork week
Video room + scheduled run
DayStartHire → libraryRoomDeliverable
Mon
09:00
DianePCI DSS v4.0.1
Zoom
Req 8.3.1 MFA workpaper
Tue
10:30
TinaHIPAA Security Rule
Teams
§164.308 standing risk note
Wed
14:00
LeoSOC 2 TSC
VPods video
Period evidence pack
Thu
08:00
KaiMITRE ATT&CK
Zoom
T1078 Valid Accounts hunt
Fri
16:00
JointControl review
Teams
Exception list for the officer
Track one
Video calls, Teams, and Zoom
The call is the audit room. Agents do not lurk in a bot thread while you screen-share elsewhere. Shipping is join-the-existing-room. Next is a VPods room plus calendar invites that fire the scan.
Microsoft Teams app
One VPods app in your tenant. Chat routes to the hire you name. Calling hooks exist so agents can enter the Teams meeting, not a side channel.
VPods video rooms
Browser rooms on vpods.ca. You start the call from the sprint. Licensed agents appear on camera and in the transcript. No extra Zoom license required for the internal room.
Calendar-native Teams and Zoom
A scheduled run writes a calendar event: Teams link or Zoom ID, agent roster, and the control library for that hour. Decline the invite and the scan does not fire.
Evidence-tied recording
Optional recording and transcript attached to the workpaper. Off by default. You keep the file in your tenant. We do not treat a recording as a certificate.
Track two
Schedulers for the big guns
QSA-grade hires: Diane on PCI DSS, Tina on HIPAA, Leo on SOC 2, Kai on MITRE ATT&CK. Today they run on demand. The scheduler puts those same libraries on a clock you own — Eastern Time, licensed seats only.
PCI
Diane
PCI DSS — QSA-ready workpapers
Junior QSA posture inside the client AWS account. Read-only scans against PCI DSS v4.0.1 testing procedures. Status is per control: Compliant, Non-Compliant, Compensating Control, or Manual Evidence Needed. Never an environment-level compliance claim.
On demand today. Scheduler next: weekly CDE-adjacent scans before QSA fieldwork.
HIPAA
Tina
HIPAA Security Rule — standing risk analysis
Administrative, Physical, and Technical Safeguards under 45 CFR §164.308. Deliverable is a standing risk analysis for the compliance officer, not an OCR certificate. HIPAA has no third-party stamp — the pack exists to reduce audit surprise.
On demand today. Scheduler next: monthly safeguard refresh plus a walkthrough in Teams.
SOC 2
Leo
SOC 2 — Trust Services Criteria over a period
Security, Availability, Confidentiality, Processing Integrity, Privacy — you pick which apply. Type II needs proof of operation over time. Leo collects the timestamped trail the CPA firm will ask for. This pack is not an audit opinion.
On demand today. Scheduler next: daily period evidence so Type II is not a scramble in week twelve.
MITRE
Kai
MITRE ATT&CK — security hunts
Kai already runs on-demand AWS posture (misconfig, exposure, IAM risk, anomalous activity) without mapping to a named regulation. Next: scheduled ATT&CK technique windows — Valid Accounts, Credential Access, Persistence — with Agentix approval before any change.
On-demand posture today. Scheduler next: campaign calendars mapped to ATT&CK IDs.
How a scheduled run works
License, clock, room, officer
Pick licensed seats
Diane, Tina, Leo, and Kai only run if those seats sit on an active subscription. A canceled or unpaid pod grants zero scheduled scans.
Set the clock
Eastern Time, same as the company. Daily, weekly, or a one-shot before fieldwork. The scheduler is a calendar, not a chatbot reminder.
Attach a room
VPods video, Microsoft Teams, or Zoom. The agent joins at the start of the window. You walk the control. The workpaper lands when the hour closes.
Keep the officer in the loop
Exceptions go to the named officer, not a public channel. Status stays per procedure. Nobody on this product will tell an assessor the environment is certified.
Seats stay paid. Scans stay honest.
Diane, Tina, Leo, and Kai are subscription hires. Canceled, past-due, or unpaid seats do not keep a calendar. The Compliance Pod covers SOC 2, HIPAA, and cyber; hire Diane à la carte when PCI is in scope. Nothing on this page is a trial, a complimentary seat, or a certificate.