Compliance Reporting
Beak automates compliance reporting and evidence collection across all product pillars, reducing manual effort and ensuring continuous audit readiness.
Report Types
Framework Compliance Reports
Pre-built reports mapped to compliance frameworks:
| Report | Framework | Content |
|---|---|---|
| SOC 2 Readiness | SOC 2 | Control status, evidence summary, gap analysis |
| ISO 27001 Controls | ISO 27001 | Annex A control mapping, implementation status |
| NIST 800-53 Assessment | NIST | Control family coverage, finding summary |
| CIS Benchmark | CIS | Configuration compliance scores by benchmark |
| HIPAA Assessment | HIPAA | Safeguard status, risk assessment summary |
| GDPR Compliance | GDPR | Data processing inventory, rights fulfillment status |
Operational Compliance Reports
| Report | Description |
|---|---|
| Patch Compliance | Patch status across all assets, compliance percentage, overdue patches |
| Vulnerability Summary | Open vulnerabilities by severity, age, and remediation status |
| Access Review | User access summary, role assignments, last login dates |
| License Compliance | Software license utilization, over/under-licensing |
| SLA Compliance | SLA achievement rates, breach incidents, trend analysis |
| AI Governance | AI model usage, guardrail enforcement, policy compliance |
Generating Reports
On-Demand Reports
- Navigate to Compliance & Audit > Reports
- Select the report type
- Configure parameters:
- Date Range — Reporting period
- Scope — All tenants, specific tenant, or specific product
- Format — PDF, CSV, or JSON
- Click Generate Report
- Download when ready (large reports are generated asynchronously)
Scheduled Reports
Automate report generation on a schedule:
- Navigate to Compliance & Audit > Reports > Schedules
- Click Create Schedule
- Configure:
- Report Type — Select which report to generate
- Frequency — Daily, weekly, monthly, quarterly
- Recipients — Email addresses to receive the report
- Format — PDF, CSV, or JSON
- Click Save Schedule
Evidence Collection
Automated Evidence Gathering
Beak continuously collects compliance evidence from all product pillars:
| Evidence Type | Source | Example |
|---|---|---|
| Access Control Evidence | User & Role Management | User role assignments, MFA enforcement status |
| Change Management Evidence | All products | Configuration change audit logs |
| Vulnerability Evidence | Beak Security | Scan results, patch deployment records |
| Monitoring Evidence | Beak Observability | Uptime reports, alert response records |
| Incident Evidence | Beak Desk | Ticket history, resolution records, SLA data |
| AI Governance Evidence | AI Studio, Governance | Agent logs, guardrail enforcement, model access records |
Evidence Packages
Generate evidence packages for auditors:
- Navigate to Compliance & Audit > Evidence
- Select the compliance framework
- Choose the audit period
- Click Generate Evidence Package
- Download the package containing:
- Control mapping document
- Evidence artifacts per control
- Summary report with status indicators
Dashboard
Compliance Dashboard
The compliance dashboard provides a real-time overview:
- Overall compliance score — Percentage of controls in compliance
- Framework status — Per-framework compliance percentage
- Open findings — Non-compliant controls requiring attention
- Trend analysis — Compliance score over time
- Upcoming deadlines — Scheduled audits and report due dates
Drill-Down
Click any compliance metric to drill down into:
- Individual control status
- Evidence artifacts
- Remediation recommendations
- Historical trend data
Export & Sharing
Export Formats
| Format | Use Case |
|---|---|
| Formatted reports for audit submission and management review | |
| CSV | Raw data for spreadsheet analysis |
| JSON | Structured data for programmatic processing and SIEM integration |
| XLSX | Excel-compatible format with multiple worksheets per report section |
API Access
Access compliance data programmatically:
GET /api/v1/compliance/reports
GET /api/v1/compliance/evidence
GET /api/v1/compliance/frameworks/{framework}/status
Related
- Compliance Frameworks — Detailed framework coverage
- Audit Logging — Audit trail powering compliance reports
- Data Privacy — Privacy-specific compliance reporting