Coray is the Director of GSI Partner Marketing at PTC, based in London, UK. She has led Analyst Relations and Corporate Communications within PTC’s marketing organization. Prior to PTC, Coray ran Industry Relations at CRM startup Creatio, overseeing investor, analyst, and PR engagement. She began her career in financial services as an equity sales trader at Needham & Co. in New York, covering Industrials, including PTC, from an investment perspective.
Picture a Tuesday morning. A cybersecurity finding lands on a vehicle program. Or a safety question on a connected medical device. Or a field failure on a configurable industrial machine. Someone asks the obvious question: what does this actually affect?
Answering it means a requirements engineer checking Codebeamer, a PLM architect tracing change through Windchill, a variant lead working out which configurations are exposed, a design engineer in Creo and, if the fix goes out to the field, a service team figuring out which units need it. Six teams. Several days. And at the end, someone assembles the evidence by hand for the regulator.
Software-defined products made compliance everyone’s problem
Software has changed what a product is, and regulators have noticed. Automotive feels it first and hardest: ASPICE, UN R155 and ISO/SAE 21434, ISO 26262 and NHTSA inquiries each ask questions that cut across requirements, variants, change, design and the field.
But the pattern doesn’t stop at the car. Medical device makers trace requirements to risk to test for FDA and EU MDR. Aerospace and defense programs carry digital engineering mandates. Industrial and high-tech manufacturers ship configurable, connected products with growing safety and cybersecurity obligations.
The road ahead: Top automotive industry trends
From software-defined vehicles to evolving safety rules, what’s reshaping automotive.
Read the TrendsThe data to answer these questions exists. It just lives in separate places. And waiting is expensive: a requirement error found in the field can cost 10–100x more to fix than one caught at the requirements stage.
Agents on the V-cycle, a spine underneath
Today, PTC and Deloitte are introducing the Agentic Compliance Suite.
Deloitte’s orchestration layer places governance agents across the V-cycle: Quality Gate, Traceability, Risk and Configuration, always on, plus agents attached to each development phase. Underneath sits the PTC product spine. Codebeamer holds requirements and evidence. Windchill holds change and the BOM. Pure Variants handles the variant matrix. Creo, ServiceMax and Servigistics bring design, field service and service-parts data into the same thread.
Each PTC product keeps its own native AI. The agents sit on top, because the regulator’s question doesn’t live inside one product. It crosses all six.
PLE roadshow: Turning product complexity into advantage
PTC and Deloitte on taming variant complexity with product line engineering.
Read the RecapFrom trigger to fix in one cascade
When a regulatory event arrives, the cascade runs in five steps: what is our exposure, what is actually affected, what are the options, what does the regulator need to see, and how are we fixing it in the field. Each step pulls another PTC product into the answer. Impact analysis becomes a query instead of an investigation, and evidence is generated as engineering happens, per variant instead of per program.
Explore the Agentic Compliance Suite
Governance agents across the V-cycle, six PTC products underneath and one governed thread from first requirement to the field. See how it works, in automotive and beyond.
Explore the SolutionWhy this takes both of us
Deloitte brings the orchestration, the methodology and the enterprise transformation work: systems engineers and PLM architects grounded in the standards regulators read, including INCOSE practice, ISO/IEC/IEEE 15288 and 29148, ISO 26262 and ISO/SAE 21434.
PTC brings the governed data. The agents are only as good as the digital artifacts they can query, and that is what the product spine provides.
Neither alone answers the question. Together, one governed thread runs from the first requirement to the product in the field.
Compliance answers when the regulator asks
"Our customers don't need another compliance tool. They need answers when the regulator asks. The Agentic Compliance Suite brings Deloitte's orchestration and transformation expertise together with the PTC product spine, so evidence is generated as engineering happens, not assembled after the fact. That's what PTC and Deloitte deliver as one team."
Where to start
You don’t need to transform everything at once. Pick one regulatory program under pressure. Run a joint compliance-readiness assessment against the V-cycle, then stand up governance agents on the PTC spine and scale from there. For many manufacturers, that first program is automotive. The same governed thread then carries across the rest of the portfolio.
Software-defined products should meet the standard the first time. Let’s make that the default.
Explore the Agentic Compliance Suite
Heading to CES 2027 in Las Vegas (Jan 6–9): https://exhibitors.ces.tech/8_0/exhibitor/exhibitor-details.cfm?exhid=0013A00001hEYbAQAW
Up Next