Risk & Compliance Audit
Every risk clause. Every document. Every time — before you bid.
- 100% document coverage
- Severity-rated
- Page-referenced risk register
The Problem
Does this sound familiar?
“The LD clause was in Schedule D. Nobody read Schedule D before we submitted.”
“We found the risky clauses after we won — not before we bid.”
The LD rate, the bank guarantee format, the retention terms — they were in the document. Nobody found them during bid preparation. They surfaced during contract finalisation, when it was too late to reprice or renegotiate.
“We don't have a legal reviewer on every bid — so some tenders go in without a proper clause review.”
Dedicated legal review is expensive and slow. On smaller bids, it gets skipped. On larger ones, it's rushed. The result is the same — risky clauses slip through.
“Our teams treat all contract clauses equally — there's no way to prioritise what to read first.”
A 300-page tender with 60 pages of General Conditions. Everything looks equally important. Senior reviewers spend time on low-risk boilerplate and miss the high-risk clause buried in a schedule at the back.
Risk & Compliance Audit reads every clause of every document, every time — regardless of where the clause is, how dense the document is, or how many other bids are running simultaneously. It doesn't matter whether you're a CFO managing contract exposure, a legal head reviewing clause risk, a contracts manager assessing performance obligations, or a bid manager trying to submit on time. Every risk clause is surfaced, rated, and page-referenced before your team commits to the bid.
How It Works
Step by step
Four steps from raw tender document to a complete, severity-rated risk register with source references.
Step 01
Full document scan for risk signals
The engine reads every clause, schedule, appendix, and general condition — scanning for pre-defined risk indicator types and pattern-based signals. It does not limit its scan to sections labelled “Penalties” or “Liquidated Damages.” Risk clauses appear throughout tender documents and the engine reads all of them.
Step 02
Risk clauses extracted, categorised, and severity-rated
Identified risk clauses are categorised by type — financial risk, compliance obligation, timeline risk, contractual penalty, performance requirement, or unusual clause — and assigned a severity level: High, Medium, or Low. High severity flags demand immediate review.
Step 03
Page references attached to every flagged clause
Every flagged clause is linked to its exact source page. Your team can navigate directly to the clause in one click — no hunting through a 300-page document. The exact clause text is extracted alongside the flag.
Step 04
Receive your prioritised risk register
Receive a prioritised risk register — critical clauses on top, moderate flags below — ready to inform your bid / no-bid call. Every flag includes the clause reference, severity rating, and a plain-language interpretation.
In Practice
What a real day looks like
Real scenario
A contracts team is preparing a bid for a ₹120 crore urban infrastructure package. The tender document runs to 280 pages. The General Conditions of Contract alone are 68 pages. Two weeks into bid preparation, a senior contracts manager begins reading the GCC.
On page 214, buried in a sub-clause of the Performance Security section: the LD clause runs at 1.5% of contract value per week of delay, with no cap. On a ₹120 crore contract, a single week of delay costs ₹1.8 crore. The completion timeline in the tender is 14 months. The team's internal estimate for the same scope is 20 months.
This is day 12 of a 21-day bid window. The pre-bid meeting was on day 5. The window to raise clarifications has closed.
They submit anyway — with a 14-month timeline and a silent LD exposure they haven't priced. They win. Month 16 of the contract, they receive their first LD notice.
Run through Keendex Risk & Compliance Audit, this clause would have been flagged as High severity on day one — with source page, clause text, and a suggested pre-bid clarification query ready to dispatch before the pre-bid meeting.
What You'll Stop Doing
What you'll stop doing
These are the activities Risk & Compliance Audit makes unnecessary from the first tender you run through it.
- Discovering LD rates, retention terms, or performance bond requirements after the contract is signed and it's too late to renegotiate.
- Submitting bids on contracts with commercial exposure the team never identified because nobody had time to read the full GCC.
- Treating a 300-page tender as a single undifferentiated block of text with no way to prioritise what demands immediate review.
- Paying for legal review on every tender when most of the risk is identifiable from the document itself before a lawyer ever sees it.
- Missing the pre-bid window to raise a clarification on a high-risk clause because it wasn't found until week two of bid preparation.
FAQs
Frequently asked questions
Five questions that address the most common points of hesitation before a team commits to using Risk & Compliance Audit on a live tender.
What types of risk clauses does it identify?
Liquidated damages rates and caps, performance and security bond requirements, retention money provisions, defect liability periods, payment milestone structures, extension of time clauses, unilateral variation rights, unusual indemnity provisions, termination-for-convenience terms, and statutory compliance obligations — among others.
Can we configure what counts as “high severity” for our organisation?
Yes. The Template Manager allows you to set risk thresholds — for example, any LD rate above 0.5% per week as High severity, or any performance bond above 10% of contract value. These can be configured by sector, authority type, and contract value range.
What happens if the same risk clause appears in multiple sections?
All instances are extracted and cross-referenced. If the same obligation appears in both the Special Conditions and a schedule — sometimes with different terms — both are flagged and displayed together so your team can identify any inconsistency.
Can the risk register be shared with our legal or commercial team?
Yes. Export as PDF, Word, or Excel and share directly, or give team members access via the History module with appropriate role permissions.
Does it work on private sector contracts and international tenders?
Yes. The engine reads contractual language regardless of authority type. For international tenders, terminology may vary by jurisdiction — the Template Manager can be configured with alternate clause terminology to ensure accurate identification.
Ready to see Risk & Compliance Audit on your live tender?
Book a personalised demo — we run it on a real document from your sector.