Turn the control walkthrough into a process map and a written procedure.
Wavelength is for compliance, security, and GRC teams who need to document how a control actually operates. The control owner talks through the process once, or you upload the recording, and you get a visual process map with swimlanes by role and a written SOP with an owner on every step.
The slow part of control documentation is not the control itself. It is reconstructing the steps afterward from a half page of notes and a memory of who said what. The handoffs between IT, system owners, and security are the part that gets lost, and they are the part an auditor asks about first.
The demo needs no account. The free plan needs no card.
Why control walkthroughs are hard to capture
You schedule a meeting with the control owner and take notes while they explain how access reviews work. You write up the procedure afterward from those notes. The happy path is easy to remember. The exceptions are not: what happens when the owner is out, who covers the evidence save, which system is out of scope. Those are the steps that make the documentation useful, and they are the ones nobody wrote down.
The result is a procedure that covers the common case and quietly drops the edge cases. The next person to follow it hits the first exception and asks the owner anyway.
How it works
- The control owner talks through the process. They speak as if training someone who just started. You do not need a script. The actors, steps, decisions, and handoffs appear on the canvas as they are mentioned.
- Or upload the recording. Drop in a Loom download, a voice memo, or a call recording. Audio and video files up to 120 minutes are supported, counted against your mic minutes.
- Switch to swimlanes by role. The Lanes layout groups steps into rows by owner, so you can see the handoffs between IT, system owners, and security at a glance.
- Share a review link with the control owner. They open it in a browser, confirm each step, or flag one that is wrong. No account and no install for them.
- Export the SOP. Choose Export and then SOP document for a .doc file with owners per step, or Copy SOP as Markdown for a wiki.
Version history shows what changed
Save a restore point before a control changes and another after. The version history shows what changed and when, so you can show the procedure that was in place at a given date without digging through old emails.
What the procedure includes
The exported SOP lists the roles mentioned in the process, the tools involved, and the numbered steps in order. Each step has an owner when the conversation names who does it. Decision points appear as branches with the paths that follow. Open questions the AI could not resolve are called out at the end so you know what to confirm with the people who run the control.
Where it does not fit
Wavelength is not a GRC platform. It does not manage frameworks, track findings, run assessments, or store evidence files. It documents how the control operates, in the words of the person who runs it. Use it alongside your GRC tool to produce the procedure, then save the export wherever your evidence lives.
It also does not collect screenshots or test controls. Scribe and Tango record clicks on a screen. Wavelength captures the spoken walkthrough, including the decisions and handoffs that happen off screen. Use them together if the control has both a screen portion and a conversation portion.
Common questions
Does Wavelength collect evidence or test controls?
No. Wavelength documents how the control operates, in the words of the person who runs it. It does not collect screenshots, run tests, or store evidence files. You save the exported procedure wherever your evidence lives.
Can I show who owns each step in the procedure?
Yes. Each step has an owner field. The owner comes from the conversation when someone is named, and you can edit it on the canvas. The SOP export lists the owner for every step.
How does version history help with audits?
You can save a restore point before a control changes and another after. The version history shows what changed and when, so you can show the auditor the procedure that was in place at a given date.
Can the control owner review the map without an account?
Yes. You share a review link and the control owner opens it in a browser. They can confirm each step or flag one that is wrong, with no account and no install.
Is this a GRC platform?
No. Wavelength captures and documents the control walkthrough. It does not manage frameworks, track findings, or run assessments. Use it alongside your GRC tool, not instead of it.