# Compliance report

> Open the Compliance Report from the dashboard, turn on a framework and follow your Law 25 / GDPR controls, ISO 27001, SOC 2 and NIST CSF progress.

- URL: https://nextit.tech/docs/compliance-report/
- Language: English
- Other language: https://nextit.tech/fr/docs/rapport-de-conformite/
- Publisher: NextIT (https://nextit.tech/)

---

# Compliance report

Open the Compliance Report from the dashboard, turn on a framework and follow your Law 25 / GDPR controls, ISO 27001, SOC 2 and NIST CSF progress.

See where you stand on Law 25, ISO 27001, SOC 2

## Key capabilities

-   Law 25 / GDPR controls, tracked as you go
-   A live compliance score
-   SOC 2 / ISO 27001 for enterprise needs

## Learn more

[Open the feature page See where you stand on Law 25, ISO 27001, SOC 2](https://nextit.tech/features/compliance-report/) [Ask your AI assistant Use this feature from ChatGPT, Claude or any MCP client.](https://nextit.tech/docs/connect-your-ai-assistant/)

## Know exactly where you stand on compliance

Follow your Law 25 / GDPR controls and see a live compliance score. Track your progress against the frameworks that matter to your business, including ISO 27001, SOC 2 and NIST CSF.

Compliance On track

Law 25 / GDPR controls On track

Compliance score Live

SOC 2 / ISO 27001 Enterprise

Law 25 72%

ISO 27001 68%

## Before you start

-   Open the report from the `Compliance Report` card on the dashboard.
-   Turn on at least one framework. If no framework is on, the page offers `Manage frameworks`.
-   Update your assessment answers and your evidence before you generate the report, because the report shows their current state.

## How to generate a report

1.  1

    Choose the framework

    Choose the `Framework` that you want to report on. One report covers one framework.

2.  2

    Generate the report

    Select `Generate Report`. Select `Regenerate` after you change your controls or your evidence, so that the report shows the latest state.

3.  3

    Download the report

    Select `Download CSV` for the controls and the evidence (CSV means comma-separated values), or `Generate PDF` for a formatted summary (PDF means portable document format). The next section helps you choose.

## Manage frameworks

An Admin turns frameworks on or off in My Company → `Compliance`. The same page shows your readiness. An Auditor can view this page but cannot change it. If no framework is on, select `Manage frameworks` to go to the framework list.

## CSV or PDF: which one to use

The CSV file holds the data. The PDF file holds a formatted summary.

| Format | What it contains | Use it when |
| --- | --- | --- |
| `Download CSV` | The controls and the evidence. | You need the data in a spreadsheet, or for your own review. |
| `Generate PDF` | A formatted summary of the report. | You share the report with an auditor or a client, or you need a printed copy. |

## What the report contains

-   **Compliance overview:** where the company stands for the framework.
-   **Critical controls:** the controls that the report marks as critical.
-   **Key risks:** the main risks for the framework.
-   **Top categories:** the main categories of the framework.
-   **Readiness:** how ready the company is for the framework.

## Share the report

-   To give an auditor access to the app, an Admin grants the auditor access in My Company → `Access & Roles`.
-   To send the report outside the app, download the PDF and send that file to the client or the auditor.
-   Send the CSV only when the recipient needs the detail of the controls and the evidence.
-   Check the file before you send it, especially the framework named on the report.

## What you see

The page holds the framework choice, the `Generate Report` or `Regenerate` action, and the two downloads, `Download CSV` and `Generate PDF`. One report covers one framework at a time.

## Common tasks

-   Choose a framework, then select `Generate Report`.
-   Select `Regenerate` after you change your controls or your evidence.
-   Download the controls and the evidence with `Download CSV`.
-   Create a formatted summary with `Generate PDF`.
-   Turn a framework on or off in My Company → `Compliance`. This needs an Admin.
-   Grant an auditor access in My Company → `Access & Roles`. This needs an Admin.

## Tips

-   Generate one report for each framework that you must show. A report covers one framework only.
-   Regenerate before each meeting with an auditor or a client, so the report shows your latest work.
-   Keep a dated copy of each PDF that you send.
-   Read the readiness section first when you plan your next steps.

## Related

-   [Compliance assessment](https://nextit.tech/docs/compliance-assessment/)
-   [Evidence & controls](https://nextit.tech/docs/evidence-controls/)

  Free posture report

### Is your business exposed? Find out in 5 minutes.

Enter your domain. Confirm ownership by email, then get your free security posture & compliance report.

[Book a strategic meeting](https://nextit.tech/book-a-demo/)

-   No card required
-   Hosted in Canada