Live demoFictional sample data. Explore every screen. Nothing you click is saved.Fictional sample data. Nothing is saved.
Sign up for a real accountSign up16Compliance
Time-boxed control and policy waivers with expiry-driven review. New exceptions start in DRAFT; an admin approves with a mandatory expiry, and the expiry job flips it to EXPIRED and opens a finding automatically when it passes.
Scope: CONTROL · CC6.1
Build server predates SSO rollout and cannot be migrated until Q4. Network-isolated with IP allowlist in the interim.
Compensating controls: IP allowlist + VPN-only access, reviewed weekly by platform team.
Approved: 2026-05-01 · Expires: 2026-08-01
Scope: RISK · Vendor SOC 2 bridge letter missing
Key subprocessor's annual SOC 2 report lapsed while the new one is in fieldwork.
Approved: — · Expires: —
Scope: POLICY · Endpoint Security Policy
Two shared kiosk devices in the SF office run a locked-down OS image without FDE support.
Compensating controls: Devices are bolted down, on a segmented VLAN, and auto-wipe nightly.
Approved: 2026-01-10 · Expires: 2026-04-10