Reporting and audit trail
The pack your board reads, generated rather than assembled.
Board summary and reporting
Board packs, executive summaries, framework status, Statement of Applicability, risk and incident reports, rendered to PDF with your branding. Build your own templates once and generate them repeatedly, scheduled, approved before release and delivered automatically.
Key capabilities
- Board pack and executive summary templates
- Statement of Applicability from the control tree
- Custom templates with your sections and branding
- Scheduled generation, approval before release, automated delivery
Dashboards and analytics
Headline tiles with history and change, an attention feed of what is waiting on you, and per-module summaries. Ageing, coverage and finding analytics are computed from the live record rather than an export.
Key capabilities
- Rearrangeable cards with a saved layout
- Role-aware scoping
- Control coverage across frameworks
- Ageing and recurrence analysis on findings, risks and evidence
Tamper-evident audit trail
Every action is logged with who, what and when, and each entry is cryptographically chained to the one before it. Editing a field breaks the link the next row asserts; deleting one leaves a gap in the sequence.
Key capabilities
- Hash-chained entries with sequence numbers
- On-demand verification of the whole chain
- Separate chain for supplier-side activity
- Filterable by actor, object, action and date
Proof point
The chain makes tampering detectable, not impossible. Someone with database access could rewrite history and recompute it, so export the chain head somewhere they do not control. What it guarantees is that tampering cannot be silent.
Questions about this module
Can the auditor generate their own reports?
Yes. The Auditor Workspace has report generation aligned to certification-body formats, built from the engagement record.
How long are logs retained?
For the life of the deployment by default, with retention configurable to your policy. Logs are part of the evidence record and are hashed like everything else.
Is the audit trail itself auditable?
Yes. It is append-only from the user’s point of view: entries are never edited or silently removed, and superseded evidence remains readable.