Compliance Tracker
AI Governance Compliance Tracker
Track control status, evidence readiness, and AI governance framework alignment across your enterprise AI systems.
Overall Compliance Readiness
42%
Evidence Readiness Score
25%
Open Control Gaps
7
High-Risk AI Systems
7
Controls Missing Evidence
7
Upcoming Review Items (30d)
4
Framework Alignment Matrix
ProofLayer AI pillars mapped to recognized AI governance frameworks.
Filter by framework
| Framework | Control Area | Mapped Pillar | Control Status | Evidence | Owner | Risk | Next Review |
|---|---|---|---|---|---|---|---|
| ISO 42001 | AI System Inventory | P01 Inventory | Implemented | Missing | A. Rivera (CIO) | High | Sep 10, 2026 |
| ISO 42001 | Identity & Access | P02 Identity | In Progress | Missing | M. Chen (CISO) | Critical | Jul 22, 2026 |
| NIST AI RMF | Govern-1.4 | P02 Identity | Needs Review | Outdated | M. Chen (CISO) | High | Aug 1, 2026 |
| ISO 42001 | Access Enforcement | P04 Access | Implemented | Verified | R. Nakamura (Data Platform Owner) | Medium | Dec 1, 2026 |
| ISO 23894 | Traceability | P03 Lineage | Implemented | Missing | S. Patel (CDO) | High | Sep 20, 2026 |
| NIST AI RMF | Map-2.2 | P03 Lineage | In Progress | Needs Review | S. Patel (CDO) | High | Sep 12, 2026 |
| ISO 23894 | Logging & Monitoring | P03 Lineage | Needs Review | Outdated | L. Bergstrom (Enterprise Architect) | Medium | Aug 20, 2026 |
| ISO 42001 | Data Quality | P05 Quality | Implemented | Provided | R. Nakamura (Data Platform Owner) | Medium | Dec 25, 2026 |
| ISO 42001 | Audit & Evidence | P06 Evidence | Evidence Missing | Missing | J. Okafor (Legal & Compliance) | Critical | Jul 25, 2026 |
| Internal Policy | Risk Acceptance | P06 Evidence | In Progress | Needs Review | J. Okafor (Legal & Compliance) | Medium | Aug 10, 2026 |
| NIST AI RMF | Manage-4.1 | P07 Operating Model | Not Started | Missing | L. Bergstrom (Enterprise Architect) | High | Sep 15, 2026 |
| Internal Policy | Governance Cadence | P07 Operating Model | Verified | Verified | A. Rivera (CIO) | Low | Sep 30, 2026 |
Control Register
Detailed register of AI governance controls with owner and evidence status.
| ID | Control | Owner | Status | Evidence | Risk | Due | Action |
|---|---|---|---|---|---|---|---|
| AIC-001 | A. Rivera (CIO) | Implemented | Missing | High | Aug 15, 2026 | ||
| AIC-002 | M. Chen (CISO) | In Progress | Missing | Critical | Jul 30, 2026 | ||
| AIC-003 | M. Chen (CISO) | Needs Review | Outdated | High | Aug 1, 2026 | ||
| AIC-004 | R. Nakamura (Data Platform Owner) | Implemented | Verified | Medium | Oct 15, 2026 | ||
| AIC-005 | S. Patel (CDO) | Implemented | Missing | High | Sep 1, 2026 | ||
| AIC-006 | S. Patel (CDO) | In Progress | Needs Review | High | Sep 30, 2026 | ||
| AIC-007 | L. Bergstrom (Enterprise Architect) | Needs Review | Outdated | Medium | Aug 20, 2026 | ||
| AIC-008 | R. Nakamura (Data Platform Owner) | Implemented | Provided | Medium | Nov 1, 2026 | ||
| AIC-009 | J. Okafor (Legal & Compliance) | Evidence Missing | Missing | Critical | Jul 25, 2026 | ||
| AIC-010 | J. Okafor (Legal & Compliance) | In Progress | Needs Review | Medium | Aug 10, 2026 | ||
| AIC-011 | L. Bergstrom (Enterprise Architect) | Not Started | Missing | High | Sep 15, 2026 | ||
| AIC-012 | A. Rivera (CIO) | Verified | Verified | Low | Sep 30, 2026 |
Evidence Readiness
Governance is not proven until evidence exists.
- MissingAI use case inventory maintainedPolicy document · Architecture diagram · +1
- MissingHuman user attribution captured for AI-triggered actionsAudit log sample · Architecture diagram · +1
- OutdatedService principal and agent identity patterns reviewedAccess control export · Policy document
- VerifiedAccess controls enforced for AI data sourcesPolicy document · Access control export · +1
- MissingAI output traceability to source data documentedLineage screenshot · Architecture diagram · +1
- Needs ReviewData lineage available for AI-consumed datasetsLineage screenshot · Architecture diagram
- OutdatedPrompt, model, and retrieval context logging reviewedAudit log sample · Monitoring dashboard
- ProvidedData quality checks implemented before AI consumptionData quality report · Monitoring dashboard
- MissingAudit evidence package maintained for governance reviewPolicy document · Approval record · +2
- Needs ReviewAI risk acceptance documented and approvedApproval record · Risk assessment
- MissingModel or agent lifecycle review completedPolicy document · Approval record · +1
- VerifiedQuarterly governance review performedApproval record · Policy document
Priority Compliance Actions
Control Remediation Sprint
Your highest-priority gaps are Identity and Actor Attribution, Audit Evidence Readiness, and Data Lineage Traceability. These gaps may limit your ability to prove who performed AI-driven actions, what data was used, and whether required controls were enforced.
Several controls are not yet technically implemented. A 30–60 day remediation sprint closes the highest-priority technical gaps.
This tracker supports AI governance readiness, evidence management, and internal control tracking. It is not a legal opinion, certification, or substitute for formal audit or regulatory review.