Skip to content

Compliance Reports

Compliance Reports provides per-framework evidence reporting: a card per enabled framework with a DLP-metrics overlay (events scanned, remediated, violations/leaked, a remediation-rate bar, top entity types), a Generate report action per framework and reporting period, a report-history table (framework, period, generated date, status, download), and CSV export of both the authored compliance-bundle posture and the current per-framework metrics snapshot.

The Compliance Reports panel showing per-framework cards with events-scanned and remediation-rate metrics, a Generate report button, and a report-history table with download actions.
Monitoring & Reporting → Compliance ReportsCitadel synthetic data on a non-production Arbitex demo instance. Never client data.
  1. Open Monitoring & Reporting → Compliance Reports. Review each enabled framework’s card: events scanned, remediated (blocked/redacted — a success), violations (detected but egressed unremediated — leaked), and the remediation-rate bar.

  2. Pick a reporting Period — the current quarter or one of the prior three.

  3. Click Generate report on a framework’s card to synchronously render a real evidence document from your current posture; it becomes downloadable immediately.

  4. Review the report-history table — framework, period, generated timestamp, status (Ready / Generating / Failed / Pending), and a Download action for ready reports.

  5. Export the current metrics snapshot to CSV, or export the authored compliance-bundle posture to CSV.

Terminal window
curl -X POST "https://admin.arbitex.ai/api/v1/admin/security/compliance/reports/list" \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{}'
curl -X POST "https://admin.arbitex.ai/api/v1/admin/security/compliance/reports/generate" \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"framework": "hipaa", "period": "2026-Q3"}'

Reports are downloaded through a dedicated download call keyed by report ID.

Available on every plan. Framework cards are scoped to your enabled compliance bundles — see Compliance Bundles.

Report generation renders synchronously from your organization’s real, tenant-scoped compliance posture and persists the artifact server-side; download is admin-gated and tenant-scoped.