Platform

Compliance report

Open the Compliance Report from the dashboard, turn on a framework and follow your Law 25 / GDPR controls, ISO 27001, SOC 2 and NIST CSF progress.

See where you stand on Law 25, ISO 27001, SOC 2

Key capabilities

Law 25 / GDPR controls, tracked as you go
A live compliance score
SOC 2 / ISO 27001 for enterprise needs

Learn more

Open the feature pageSee where you stand on Law 25, ISO 27001, SOC 2 Ask your AI assistantUse this feature from ChatGPT, Claude or any MCP client.

Know exactly where you stand on compliance

Follow your Law 25 / GDPR controls and see a live compliance score. Track your progress against the frameworks that matter to your business, including ISO 27001, SOC 2 and NIST CSF.

ComplianceOn track

Law 25 / GDPR controlsOn track

Compliance scoreLive

SOC 2 / ISO 27001Enterprise

Law 2572%

ISO 2700168%

Before you start

Open the report from the Compliance Report card on the dashboard.
Turn on at least one framework. If no framework is on, the page offers Manage frameworks.
Update your assessment answers and your evidence before you generate the report, because the report shows their current state.

How to generate a report

1
Choose the framework
Choose the Framework that you want to report on. One report covers one framework.
2
Generate the report
Select Generate Report. Select Regenerate after you change your controls or your evidence, so that the report shows the latest state.
3
Download the report
Select Download CSV for the controls and the evidence (CSV means comma-separated values), or Generate PDF for a formatted summary (PDF means portable document format). The next section helps you choose.

Manage frameworks

An Admin turns frameworks on or off in My Company → Compliance. The same page shows your readiness. An Auditor can view this page but cannot change it. If no framework is on, select Manage frameworks to go to the framework list.

CSV or PDF: which one to use

The CSV file holds the data. The PDF file holds a formatted summary.

Format	What it contains	Use it when
`Download CSV`	The controls and the evidence.	You need the data in a spreadsheet, or for your own review.
`Generate PDF`	A formatted summary of the report.	You share the report with an auditor or a client, or you need a printed copy.

What the report contains

Compliance overview: where the company stands for the framework.
Critical controls: the controls that the report marks as critical.
Key risks: the main risks for the framework.
Top categories: the main categories of the framework.
Readiness: how ready the company is for the framework.

To give an auditor access to the app, an Admin grants the auditor access in My Company → Access & Roles.
To send the report outside the app, download the PDF and send that file to the client or the auditor.
Send the CSV only when the recipient needs the detail of the controls and the evidence.
Check the file before you send it, especially the framework named on the report.

What you see

The page holds the framework choice, the Generate Report or Regenerate action, and the two downloads, Download CSV and Generate PDF. One report covers one framework at a time.

Common tasks

Choose a framework, then select Generate Report.
Select Regenerate after you change your controls or your evidence.
Download the controls and the evidence with Download CSV.
Create a formatted summary with Generate PDF.
Turn a framework on or off in My Company → Compliance. This needs an Admin.
Grant an auditor access in My Company → Access & Roles. This needs an Admin.

Tips

Generate one report for each framework that you must show. A report covers one framework only.
Regenerate before each meeting with an auditor or a client, so the report shows your latest work.
Keep a dated copy of each PDF that you send.
Read the readiness section first when you plan your next steps.

Connect NextIT to your agent of choice via MCP for real-time answers.

Was this page helpful?

PreviousDomain security scan