Innovation in Compliance with Tom Fox

Hosted by Thomas Fox

Business Management NewsInterviews guests

Website RSS feed

Episodes

614

Latest episode

Aug 2026

Language

About the show

Innovation in compliance brings you interviews with industry leading experts who are changing the way practitioners approach compliance. Host Tom Fox, the Compliance Evangelist and Voice of Compliance is driving the conversation about compliance into the 2020s and beyond with his focus on innovations for the compliance practitioner and the compliance profession. If you want to learn how to bring business solutions to compliance problems to more fully operationalize compliance, this is the podcast for you.

Listen to episodes

60 recent

August 11, 202626 min

Scaling the RiskCloud and Agentic AI for Enterprise GRC with Diego Panama

Innovation comes in many areas and compliance professionals need to not only be ready for it but embrace it. Join Tom Fox, the Voice of Compliance as he visits with top innovative minds, thinkers and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits with s Diego Panama, new CEO of LogicGate.  They discuss his career from Microsoft product management to scaling Live Ramp to an IPO, building go-to-market at Olo, and joining LogicGate through a planned CEO transition with co-founder Matt Kunkel. Panama describes his focus on scaling operations while preserving a customer-first, values-driven culture, and sharpening the company’s positioning as the leading AI GRC platform for enterprise. The discussion highlights AI’s role in moving GRC from check-the-box defense to real-time, strategic enablement, including holistic risk visibility across silos, third-party risk blind spots, and always-on monitoring. Panama explains LogicGate’s workflow agents and the path toward orchestrated, autonomous GRC with humans setting risk appetite, emphasizes data access, quality, and governance, and outlines product UX evolution from no-code to prompt-driven configuration. He notes boards’ increased attention to GRC due to AI risks and encourages students and practitioners to stay curious and aligned to business outcomes.  Key Highlights  ·      Why LogicGate and GRC ·      AI Makes GRC Strategic ·      Holistic Risk and Third Parties ·      Workflow Agents Explained ·      Data Access and Governance ·      Big Tech Lessons on Focus ·      Staying Current in Tech Resources  LogicGate Diego Panama on LinkedIn   Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts

August 4, 202632 min

From Checklists To Dynamic Compliance Systems with Justin Roopnarine

Innovation comes in many areas, and compliance professionals need not only to be ready for it but also to embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits with Justin Roopnarine, Partner at Limitless Capital. Roopnarine is an engineer whose career has spanned the Air Force, financial engineering, software engineering, and both public- and private-sector problem solving. He brings a practical perspective to evolving compliance and risk management, arguing that organizations need systems that can adapt to changing conditions rather than rely on static checklists or rigid SOPs. Roopnarine believes algorithmic auditing can make compliance more repeatable and effective by using rules, metrics, and programmatic checks to document decisions, monitor thresholds, and quickly identify where breakdowns occur. At the same time, he emphasizes that AI and technology should strengthen human judgment and that financial literacy helps people comply more fully when they understand the reasons behind the rules and the broader goals they support. Key highlights: Living Compliance Framework for Changing Conditions Algorithmic Compliance Checks with Portfolio Exposure Limits FAR North Star of government contracting compliance Consolidated Database Feedback Loop from Lower Ranks Understanding the “why” behind financial rules Resources: Managing Partner: Limitless Capital LP Podcast: Approaching Infinity Website: https://limitlesslp.com/ LinkedIn https://www.linkedin.com/in/justin-roopnarine/ YouTube https://www.youtube.com/@approachinginfinityshow Spotify https://open.spotify.com/show/32jOxQ8WhZElwk4c3RjkmD Instagram https://www.instagram.com/jrlive7/ TikTok https://www.tiktok.com/@approaching_infinity_pod Facebook https://www.facebook.com/profile.php?id=61576572194605 Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts

July 28, 202628 min

Compliance Evangelists Fighting Modern Slavery Together with Matt Friedman

Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits with Matt Friedman, who provides a 2026 update to the fight against the international scourge of human trafficking and modern slavery and discusses his latest book, Awakening the Advocate. Friedman is a leading voice in the fight against human trafficking and modern slavery, known for founding and leading the Mekong Club and for more than 35 years of advocacy, policy work, and corporate engagement. He views modern slavery as a vast, still underaddressed crisis, where tens of millions remain trapped while the number of survivors helped and criminals convicted remains far too small to match the scale of the problem. Friedman believes the biggest barrier is not compassion but awareness and that educating employees inside companies can “wake up” lawyers, bankers, marketers, and other professionals who already have the instincts to help. From his perspective, ESG and compliance efforts can protect the business while also driving meaningful anti-slavery action, making corporate compliance a practical engine for both risk reduction and social change. Key highlights: Compliance Evangelists Fighting Modern Slavery Together Leadership Briefings and Procurement Risk Assessments Board-Level Awareness Protects Reputation and Brand Value AI sifting data to uncover scam-center patterns Modern Slavery Risks Make ESG’s Future Uncertain Resources: Matt Friedman on LinkedIn The Mekong Club Awakening the Advocate on Amazon.com Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts.

July 21, 202628 min

Governing AI Well Deepens Enterprise Risk Strategy

Welcome to the award-winning Innovation in Compliance. In this episode, Tom welcomes back Gerry Zack, and they discuss the growing use of AI in compliance and the launch of Eastward AI. Gerry Zack brings a practical, cautionary perspective to AI-powered compliance and risk management, shaped by 18 months of advising organizations on how AI is being used in real compliance programs. He sees AI already embedded in functions like hotline support, policy-to-risk mapping, website scanning, behavioral analytics, transaction monitoring, and even parts of investigations, while warning against overreliance on it in sensitive investigative work. As one of the architects of Eastward AI, he helped evolve the platform from a CSRD and double-materiality tool into a flexible compliance and enterprise risk management solution that supports frameworks such as COSO ERM, DOJ guidelines, ISO 37301, and ISO 31000. Overall, Zack believes the real opportunity lies in reducing organizational paralysis, using AI responsibly, and connecting compliance more closely with HR, IT, and other risk functions to strengthen leadership and decision-making. Resources: Gerry Zack on LinkedIn RiskTrek Eastward AI Tom Fox Instagram Facebook YouTube Twitter LinkedIn

July 14, 202628 min

AI Compliance at the Speed of Content with Kunal Vankadara

Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits Kunal Vankadara, CEO & Co-founder of Haast, to discuss how AI can help regulated organizations scale compliance as content volume explodes and regulatory scrutiny increases. Vankadara believes AI-powered compliance automation is especially valuable in content review because many decisions are subjective and context-driven, such as judging whether a disclaimer is sufficiently prominent. In his view, LLMs can be trained on a company’s risk tolerance to apply those standards consistently at scale, reducing false positives and sending only gray-area issues to human experts. As AI-driven content creation and regulatory scrutiny continue to grow, he sees this approach as a way to make compliance faster, more reliable, and less of a bottleneck. Key highlights: AI-driven content surge overburdens compliance teams Training Agents to Match Company Risk Tolerance Teaching AI Risk Tolerance Beyond False Positives Compliance agents as digital twins for content Sanctions and Regulatory Changes into Actionable Intelligence Resources: Connect with Kunal Vankadara on LinkedIn Haast Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts.

June 30, 202626 min

Compliance as Market Access with Kunal Chopra

Innovation comes in many areas and compliance professionals need to not only be ready for it but embrace it. Join Tom Fox, the Voice of Compliance as he visits with top innovative minds, thinkers and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits with Kunal Chopra, CEO of Certivo, an AI-native regulatory intelligence and compliance management platform for supply chains. Chopra recounts his tech and supply-chain background (Amazon, Microsoft, Groupon, prior CEO roles) and explains his insight that compliance is fundamentally about market access and revenue protection, not box-checking. He describes how global regulations are increasing in scope, enforcement, fines, and deadlines, creating repeated, deadline-driven scrambles and visibility gaps for executives. Certivo aims to flip compliance from reactive to proactive by identifying applicable regulations by market and product, ingesting product data from systems like ERP/PLM, and using AI to coordinate supplier documentation, read unstructured files, extract data, and map evidence to rules while leaving deterministic compliance decisions to rules-based logic to avoid hallucinations. The platform supports scenario analysis for supply disruptions, continuous monitoring as rules change, and predictive preparation for emerging regulations, helping compliance leaders align with sales, marketing, and operations as revenue enablers. Key Highlights · Compliance as Market Access · Visibility Gaps and Scrambles · Who Owns the Risk · How Certivo Works · Preventing AI Hallucinations · Scenario Planning Supply Chain · Continuous Monitoring and Prediction Resources Connect with Kunal Chopra on LinkedIn Certivo Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts

June 23, 202622 min

Cybersecurity Workforce Design: Reducing Burnout, Clarifying Accountability, and Aligning Incentives with Dan Duffy

Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom visits Dan Duffy, the Cyber Practice lead at Consulting Solutions and a longtime cybersecurity and executive-search professional. They chat about the paradox of rising security spend alongside increasing burnout and turnover. Duffy argues organizations cannot hire their way out of broken structures: undefined workflows, lack of playbooks, shadow IT, fragmented accountability, and excessive alert volumes cause teams to drown, making burnout a business risk rather than an HR metric. He emphasizes auditing workforce design, mapping workflow needs, and ensuring executive and board-level support, including proper CISO reporting lines and authority. They discuss the emerging demand for an AI compliance officer, the need for AI governance ownership and accountability, and misaligned incentives in which security is treated as a late-stage tax rather than a design principle. Duffy advocates maturity-focused programs, incident-informed leadership, and stronger entry-level pipelines. Key highlights: The Cyber Talent Crisis Burnout as Business Risk AI Governance Accountability Building for Long-Term Success Future Workforce Pipeline Advice for New Entrants Rethinking Workforce Strategy Resources: Connect with Dan Duffy on LinkedIn Consulting Solutions Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts.

June 16, 202628 min

Compliance by Design in iGaming: Engineering, Data, and Release Governance with Mouhcine Jalili

Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom visits with Mouhcine Jalili, VP of Growth – iGaming at Software Mind, on reframing iGaming compliance as a design, delivery, and platform challenge rather than an end-stage legal checklist. Mouhcine argues compliance failures often stem from siloed teams, fragmented legacy platforms, inconsistent vendor integrations (B2B2C), and release management across jurisdictions with differing rules (e.g., spin time, buy-bonus features). He emphasizes strong release governance, modular and configurable architectures, automated controls that cannot be bypassed, and real-time monitoring and alerts to prevent harm, including responsible gambling interventions based on early behavioral signals. Scaling successfully requires standardization and automation while allowing local configuration and avoiding post-acquisition data fragmentation. Over the next 3–5 years, he expects operational compliance to become more engineering- and data-driven, with tighter integration among compliance, product, and engineering teams. Key highlights: Compliance As Design Platform Breaking Silos With Automation KYC Data And Onboarding Gaps Integrity And Preventive Controls Future Engineering Driven Compliance Resources: Connect with Mouhcine Jalili on LinkedIn Software Mind on Linkedin Software Mind Website Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts.

June 9, 202628 min

Rethinking SpeakUp: UX, Trust, and AI in Whistleblowing and Investigations with Tim Morss

Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom visits with Tim Morss, CEO at SpeakUp, about the evolution of speak-up systems from the employee perspective. Morss describes his background in compliance technology and SpeakUp’s global footprint, emphasizing that employee expectations favor frictionless, mobile-first, intuitive reporting with transparency and feedback over 800-number hotlines and complex forms. He notes common program gaps: hard-to-find reporting channels, poor mobile experiences, overreliance on telephony (especially problematic for non-English speakers), insufficient guidance on what to report, and weak trust due to lack of follow-up and perceived inaction. They consider generational preferences, privacy-aware deployment, such as QR code placement, and AI use cases such as multilingual voice intake for illiterate supply-chain workers, while cautioning against unsafe AI practices and autonomous decision-making. Morss highlights investigative management as a major opportunity beyond basic case repositories and forecasts greater AI-driven integration with in-house systems amid geopolitical and regulatory divergence. Key highlights: Employee Expectations Shift Common SpeakUp Mistakes Trust and Anti-Retaliation Gen Z Reporting Channels AI Voice for Workers One Practical CCO Tip Resources: Connect with Tim Morss on LinkedIn SpeakUp Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts

June 2, 202630 min

Data Defensibility: Enterprise Agentic AI: Governance, Auditability, and the AI Gateway Layer with Nikunj Bajaj

Innovation occurs across many areas, and compliance professionals need not only to be ready for it but also to embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom visits with Nikunj Bajaj, Co-founder & CEO at TrueFoundry, about enterprise agentic AI infrastructure, governance, and hidden costs most organizations are not accounting for. Nikunj describes TrueFoundry’s platform as a single control plane for enterprises to build, ship, and govern agentic AI applications, inspired by Meta’s internal ML stack, which he says is about a decade ahead of the rest of the industry. He argues enterprises over-focus on model and tool selection when problem definition and effective use are the real constraints. On governance, he identifies two failure modes: avoiding meaningful use cases entirely to sidestep governance risk, or trying to solve all governance problems up front and never reaching ROI. Successful teams implement application-specific controls iteratively, starting with a few high-value use cases rather than hundreds of low-value ones. He highlights that model inference accounts for only about 20% of total generative AI spend, with the majority of spend concentrated in infrastructure, engineering, and debugging, creating cost-allocation and budget-control challenges for compliance teams. For auditability, he argues that an agent without full decision traces is “a liability with an API key,” and walks through how end-to-end tracing enables audit readiness, faster debugging, and proactive attack detection. He closes by advocating centralized control via a unified AI gateway while enabling federated development and tailoring guardrails to whether your exposure surface is external or internal. Key highlights: Stop Chasing Tools Governance vs Speed Hidden AI Costs Agent Auditability Board Level Priorities Resources: Connect with Nikunj Bajaj LinkedIn – Nikunj Bajaj Learn More About TrueFoundry TrueFoundry Website TrueFoundry on LinkedIn