Compliance

Use Compliance to review evidence coverage, assign follow-up, and prepare for audit or privacy work. Your role and organization, application, or engagement access determine which records and actions are available.

Report schedules

Open Schedule reports to review recurring email reports. If editing is available, select a report, choose its schedule, and enter recipients.

• Weekly: Monday at 9 AM UTC.
• Monthly: The first day of each month at 9 AM UTC.
• Quarterly: January 1, April 1, July 1, and October 1 at 9 AM UTC.

Recipients must be active users in your organization, authorized for the report, with the same application access as you. VeriProof checks access again before sending each report. The available report types depend on your permissions and application access.

Reports are email summaries with links to the portal. A scheduled run time does not confirm that an email reached a recipient’s inbox.

Each schedule shows the latest recorded submission status. Submitted for delivery means the email service accepted the report; inbox delivery is not confirmed. If the delivery outcome is unknown, automatic resubmission pauses to avoid duplicate emails. Contact support to check that run.

ROI reports use the 90 days of session activity before the scheduled run and current application labor assumptions. Recorded AI costs are separate from estimated annual review savings. Return against budget requires a configured annual AI program budget.

Status

Check the dates and scope in Status before interpreting its measures. Each metric opens the source and filtered details behind the summary, with the next action where one is available.

Remediation

Remediation groups evidence gaps and action plans. Open an item to review the required work before changing its status or assigning follow-up.

Incidents

Incidents lists potential serious AI incidents across the applications you can access, grouped by the rule and trigger that raised them. Choose Needs classification to see only incidents that still need a decision, or All current incidents to see every current record.

If your role can classify incidents, select incidents in one group to classify them together, up to 100 at a time.

Ownership & Coverage

In Ownership & Coverage, look for missing owners and applications with incomplete or unmapped coverage. Review the application, control, or evidence record before assigning responsibility.

Regulatory framework reference

The framework reference includes only frameworks selected for the current scope. VeriProof does not infer regulatory applicability from an industry or SDK vocabulary selection. A Compliance Officer or authorized scope publisher must confirm each framework after reviewing jurisdiction, entity status, data use, deployment, and contracts.

The text export lists those selected frameworks and their current coverage. It does not add frameworks based on industry examples or unapproved scope.

Audit Prep

Find active engagements, evidence packs, and external auditor access in Audit preparation. Filter by the type of work you need, then open an engagement or evidence record for details and permitted actions.

Data & Privacy

Data & Privacy connects data-subject work, retention schedules, and related guidance. Open the relevant record before changing retention or completing a privacy action.

A practical review

1. Confirm the date range, scope, and active view.
2. Open the highest-priority metric or work item.
3. Check the source and supporting evidence.
4. Open the related application, Inbox item, action plan, or audit record to continue.