Audit & Export
Audit & Export turns your governance program into files an auditor can read, and keeps a history of governance activity. The page has two tabs: Export Reports and Audit Trail.
Enterprise feature. Open it from Governance → Audit & Export. Viewing the audit trail and downloading reports needs the Audit & Evidence Export permission at Read, which Owner, Security & Compliance and Auditor have. Generating new reports needs Read & Write, which Owner and Security & Compliance have. Department Admin has no access. See Members & Roles.
Generate a compliance report
Choose frameworks
Under Include Frameworks, select any of EU AI Act, ISO 42001 and NIST AI RMF. All three are selected by default.
Choose agents
Under Include Agents, select the agents to include, or use Select All. Search by name. At least one agent and one framework are required.
Choose content
Under Include Content:
- Evidence Details (on by default): the filled evidence fields for each agent.
- Attestations (on by default): the category sign-offs, with who signed them and when.
- Drift History (off by default): this choice is saved with the report, but the generated files do not contain drift data today. Use the Drift Alerts page for drift history.
Report Preview summarizes what will be included.
Choose a format and export
Under Export Format, pick PDF or Excel, then select Export Report. The report is named "Compliance Report" with today's date, and downloads when it is ready.
Reports reflect the evidence as it is at the moment you generate them. There is no date range: re-export before an audit to capture the current state, and keep earlier files as your historical record.
Schedule a report by email
Send the PDF report to leadership or auditors on a schedule, so they get it without signing in.
Choose the report
Choose frameworks, agents and content as for an on-demand report. Scheduled reports are PDF.
Set the schedule
Under Schedule, choose Weekly or Monthly.
Add recipients
Enter the email addresses that should receive the report, then save the schedule.
Each run generates the report from the evidence at that moment and emails it as a PDF attachment. Creating or changing a schedule needs the Audit & Evidence Export permission at Read & Write. The deployment must be able to send email. For what an executive report covers and which dashboards to pair it with, see Executive Reporting.
What a report contains
- A title page, AI Governance Compliance Report, with the project, who generated it and the date.
- Executive Summary: total agents, average coverage and the number of fully compliant agents.
- Risk Distribution: agents by EU AI Act risk level, as a chart.
- Framework Compliance Overview: average coverage and full compliance per framework.
- One section per agent, with its agent ID, risk level, coverage and frameworks, then:
- Framework Requirements: each requirement's article, title and status for that agent.
- Evidence Details, if selected: category, field and value.
- Attestation Records, if selected: the signed categories and dates.
Excel
| Sheet | Contents |
|---|---|
| Summary | Report title, project, generated by and date, dashboard statistics, risk distribution and framework compliance |
| Agents | Agent name, agent ID, risk level, coverage (%), frameworks and requirements met |
| Framework Compliance | Agent, framework, article, requirement and status |
| Evidence Details | Agent, category, field and value. Only when Evidence Details is selected. |
| Attestations | Agent, category, field, attested, attested by and date. Only when Attestations is selected. |
Recent Reports
Recent Reports lists generated reports with name, date, format, size and status. Select the download icon to get the file again. Report files are stored in ANTS Platform, so you can download them later without regenerating.
Generating a report is itself recorded in the audit trail.
Audit Trail
The Audit Trail tab shows Activity History: governance changes in this project, newest first. Each entry shows the activity, the agent, who performed it, when, and details. Search the history, and filter by action and by user.
| Activity | Recorded when |
|---|---|
| Profile Created, Profile Updated, Profile Deleted | A governance profile is created, edited or deleted |
| Risk Level Changed | A profile's risk level changes |
| Evidence Updated | Evidence is saved |
| Attestation Created, Attestation Deleted | A category attestation is saved or removed |
| Request Created, Request Updated | A request is raised, sent, accepted, submitted, sent back, approved or cancelled |
| Report Exported | A compliance report is generated |
The trail covers governance profiles, evidence and requests. For every audited action across the organization, see Audit Logs.
Next steps
- Framework Coverage: check coverage before exporting.
- Evidence Collection: complete missing evidence.
- Compliance overview: the full workflow.