ADCO: Autonomous Data & Compliance Officer (Multi-Agent System)

AI Engineer

2025

No Demo

Quick Links

On this page

Production-grade multi-agent system for automated GDPR/HIPAA/CCPA compliance audits using Google ADK + Gemini + Presidio + ChromaDB with rigorous evaluation.

Visuals

Selected dashboards, architecture diagrams, and evaluation outputs.

ADCO multi-agent system architecture diagram
Click to view full-size

Multi-agent system architecture

Click image to view full-size

ADCO workflow patterns and execution flow
Click to view full-size

Workflow patterns and execution

Click image to view full-size

Problem

Compliance audits are manual, slow, and error-prone. Teams spend most time scanning systems for PII exposure, mapping practices to regulations, generating reports, and monitoring compliance trends.

Solution

Built ADCO as a 6-agent system: Coordinator (workflow orchestration), RiskScanner (PII detection via Presidio), PolicyMatcher (regulatory mapping using RAG + Gemini), ReportWriter (PDF/JSON/Markdown reporting), Critic (LLM-based validation), and Watchdog (continuous monitoring/alerting). Implemented workflow patterns: sequential pipelines, parallel execution with asyncio.gather (2–3× speedup), and iterative refinement loops (PolicyMatcher + Critic). Added session management for multi-turn context, short/long-term memory using ChromaDB, structured logging with correlation IDs, and a Streamlit monitoring dashboard. Included Dockerization + Cloud Run deployment scripts and heavy-model optimizations.

Key Results

  • 6 specialized agents (Coordinator, RiskScanner, PolicyMatcher, ReportWriter, Critic, Watchdog)
  • Evaluation (18 test cases): Precision 85%+, Recall 82%+, F1 83%+
  • Citation accuracy ~90%
  • Parallel execution achieves 2–3× speedup vs sequential
  • Multi-turn conversations maintain context across 5+ turns
  • Structured logging + correlation IDs for tracing
  • Cloud-ready Docker + Cloud Run deployment scripts

Tech Stack

Python 3.11Google ADKVertex AI (Gemini)ChromaDBMicrosoft PresidioFastAPIStreamlitDockerasyncioRAGstructlogCloud Run