The monthly compliance audit
Read the automated monthly compliance audit on the posture page: what it checks, how it differs from the live posture score, and how to act on its guidance.
Two different things on the same page
Compliance posture at the top of /dashboard/posture is a live, always-current score. The Monthly compliance audit card further down is a frozen report generated automatically on the 1st of each month, covering the prior calendar month. This is not the same page as /dashboard/compliance (Your standards).
Summary
- Read the automated monthly compliance audit on the posture page: what it checks, how it differs from the live posture score, and how to act on its guidance.
- Use this guide to complete the workflow with audit-ready evidence and ownership.
- If you hit a blocker, run troubleshooting first, then escalate with context.
Steps
1. Open the posture page
Go to /dashboard/posture. Scroll past the live Compliance posture score to the Monthly compliance audit card.
2. Read the period and generation date
The card header shows the audited month and the date the report was generated, for example "June 2026 - generated 1 Jul 2026".
3. Review the stat tiles
Check Policies past review, Pending sign-offs, Overdue training, Open coverage gaps, Unresolved regulatory alerts, Unresolved consistency findings, Training completion, and Open training assignments.
4. Work through the guidance list
The card lists up to 6 plain-text guidance lines. These are read-only pointers, not buttons; use them to decide where to spend time in the relevant module (policies, training, or sign-off).
Verification
- The Monthly compliance audit card shows the prior calendar month, not the current one.
- Stat tiles match what you separately see in the live posture score, policies, training, and sign-off pages for that period.
- A new organization with no history shows the empty state instead of a broken card.
Troubleshooting
The card says no monthly audit yet.
This is expected for a new organization. The first automated compliance audit runs on the 1st of next month; there is no way to force an early run from the UI.
I got a notification about a ready audit but cannot find it.
The notification and email ("Monthly compliance audit ready - Month Year") link to /dashboard/posture, not the general audit-packets export list. Open posture and scroll to the Monthly compliance audit card.
I expected to download the monthly audit as a file.
The monthly audit is excluded from the audit-packets export list by design; it is surfaced only as the card on /dashboard/posture, not as a downloadable artifact.
Workflow screenshots
FAQ
Who gets notified when a new monthly audit is ready?
Org admins and super admins receive an in-product notification and an email. Other roles do not get notified automatically.
Was this article helpful?
Next article
Create your organization and choose the right starting plan
Set up your first organization with the plan that matches rollout depth and governance needs.
Continue to next guideRelated articles
Use score components to prioritize practical remediation decisions.
4 min read
Set up your first organization with the plan that matches rollout depth and governance needs.
5 min read