Audit and Compliance

Controls with evidence, and an append-only audit trail.

Controls is a table of controls grouped by framework (SOC 2, GDPR, CCPA), each with its evidence and status. Anything that needs attention is pinned first, with a path to fix it: draft a proposal, approve it, re-run the check. Run Compliance Checks records a snapshot; Export evidence report downloads it.

Audit trail is the append-only record, filterable by actor (humans, agents, system) and outcome (approved, rejected, applied). Each row reads as a sentence with the raw event code beneath.