This project is not covered by Drupal’s security advisory policy.
MI Preflight: AI Content Compliance Gate for Drupal 11
AI-powered compliance gate for Drupal 11 that enforces Section 508, WCAG 2.1, PII and CUI detection, and federal content standards before content is published.
MI Preflight adds an automated compliance review layer to Drupal's Content Moderation workflow. It helps prevent non-compliant content from being published by scanning rendered pages against accessibility, privacy, and federal content standards before they go live.
When an editor clicks Save, MI Preflight renders the complete page including CSS, images, and layout into a single self-contained document. The rendered output is analyzed using AI against configured compliance rulesets.
If the content passes, moderation continues normally.
If the content fails, MI Preflight:
- identifies the compliance issues
- explains which rule was violated
- proposes specific fixes as a draft revision
- prevents publication until a human reviewer approves
This creates a pre-publication compliance gate that helps federal agencies and contractors reduce accessibility violations, privacy exposure, and policy violations before content becomes public.
Built for Federal websites, extensible for all websites.
MI Preflight includes 62 automated checks across 8 federal compliance rulesets commonly required for government websites and federal contractors.
Accessibility (Section 508 / WCAG 2.1)
Automated checks include:
- missing or low-quality alt text
- heading hierarchy violations
- improper ARIA usage
- insufficient color contrast
- keyboard navigation issues
- missing skip navigation links
- form label accessibility
- table header structure
- non-descriptive link text
PII Detection (Privacy Compliance)
Detects potential exposure of personally identifiable information, including:
- Social Security numbers
- passport numbers
- credit card numbers
- personal email addresses
- phone numbers
- home addresses
- medical information
- financial information
- biometric identifiers
Supports privacy practices aligned with:
- Privacy Act of 1974
- NIST SP 800-122
Plain Language (Plain Writing Act)
Checks readability and clarity requirements.
Rules include:
- reading grade level
- passive voice detection
- jargon detection
- sentence length
- nominalization detection
Supports compliance with the Plain Writing Act of 2010.
Controlled Unclassified Information (CUI)
Detects potential exposure of Controlled Unclassified Information, including:
- CUI markings
- export-controlled data
- ITAR references
- sensitive operational terminology
Aligned with 32 CFR Part 2002.
PDF Accessibility
Scans uploaded PDFs for accessibility issues such as:
- untagged PDFs
- missing reading order
- missing bookmarks
- missing form labels
This is one of the most common Section 508 compliance failures.
Document Security
Scans attachments for potential risks such as:
- embedded scripts
- macros
- sensitive metadata
- hidden content
External Link Compliance
Identifies issues including:
- missing exit notices
- possible commercial endorsement
- insecure external links
Prohibited Language Detection
Flags content containing:
- discriminatory language
- hate speech
- political advocacy
- other prohibited terms
Rulesets can be customized to match agency policy.
Ruleset Driven Architecture
MI Preflight is ruleset agnostic.
Administrators can define custom compliance rules using YAML or the built-in AI Ruleset Builder.
Organizations can enforce additional policies such as:
- brand guidelines
- SEO standards
- legal review requirements
- tone of voice
- internal content policies
Key Features
- Works with OpenAI (GPT-4o) or Anthropic (Claude)
- Self-contained HTML rendering so AI analyzes the page exactly as users see it
- AI generated fixes that create draft revisions for human review
- Per content type rulesets that allow different policies for different content
- Automatic revalidation when rulesets change
- Override workflow with full audit trail
- Compliance dashboard with pass/fail statistics and CSV export
- Document scanning for PDFs and Word documents
- Queue based asynchronous processing for scalability
Drupal 11 Native Architecture
MI Preflight is designed specifically for Drupal 11.
Features include:
- Content Moderation integration
- queue-based processing
- configuration schema
- PHP attribute hooks (#[Hook])
- no .module file required
The module runs entirely in PHP and has no system level dependencies, allowing it to run on:
- Pantheon
- Acquia
- Platform.sh
- AWS
- shared hosting
Who Should Use This Module
MI Preflight is useful for:
- U.S. federal agencies
- federal contractors
- research institutes
- national laboratories
- government university programs
- organizations subject to Section 508 or WCAG requirements
It helps reduce risk in environments where accessibility, privacy, and compliance requirements are mandatory.
Sponsored by Meier Innovation.
Professional support, custom ruleset development, and enterprise deployment assistance are available.
Project information
- Project categories: Artificial Intelligence (AI), Automation, Content editing experience
- Ecosystem: QUAGMEIER
- Created by lukey on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.

