Compliance

Generate compliance reports for EU AI Act, DORA, SOC 2, HIPAA, and GDPR frameworks. Free includes 2 reports per month, Enterprise is unlimited.

Report Types

Supported compliance report frameworks:

Type Framework Description
eu_ai_act_art12 EU AI Act Article 12 record-keeping and logging requirements
eu_ai_act_art14 EU AI Act Article 14 human oversight documentation
dora_ict DORA ICT incident management evidence (Article 17)
soc2_audit SOC 2 Security, availability, and processing integrity audit
hipaa_security HIPAA Security Rule ยง164.312 technical safeguards
gdpr_art30 GDPR Security of processing evidence (Articles 5, 30(1)(g), 32)

Generating Reports

Generate a compliance report for a specific framework:

python
import asqav

# Initialize with your API key
asqav.init(api_key="sk_...")

# Generate an EU AI Act Article 12 report
report = Asqav.ComplianceReport.create(
    report_type="eu_ai_act_art12",
    period_start="2026-01-01",
    period_end="2026-03-31"
)

print(f"Report ID: {report.id}")
print(f"Status: {report.status}")
print(f"Type: {report.report_type}")

Listing Reports

Retrieve generated reports:

python
# List all reports
reports = Asqav.ComplianceReport.list()
for report in reports:
    print(f"{report.id}: {report.report_type} [{report.status}]")

# Filter by report type
dora_reports = Asqav.ComplianceReport.list(
    report_type="dora_ict"
)

# Filter by status
completed = Asqav.ComplianceReport.list(
    status="completed"
)

Downloading Reports

Download completed reports as PDF:

python
# Get a completed report
report = Asqav.ComplianceReport.get("rpt_abc123")

# Download as PDF
pdf_data = report.download(format="pdf")

with open("eu_ai_act_q1_2026.pdf", "wb") as f:
    f.write(pdf_data)

Scheduled Reports

Automate report generation on a recurring schedule:

python
# Schedule a monthly EU AI Act report
schedule = Asqav.ComplianceReport.schedule(
    report_type="eu_ai_act_art12",
    frequency="monthly"
)

print(f"Schedule ID: {schedule.id}")
print(f"Next run: {schedule.next_run_at}")

# Available frequencies: daily, weekly, monthly
# Weekly reports run every Monday
# Monthly reports run on the 1st of each month
Tip

Reports are generated in the background. Use report.status to check progress. You will receive a webhook notification when the report is ready for download.

Compliance Bundle Export

For auditors who need the underlying cryptographic evidence alongside the report, export a compliance bundle. The bundle is a self-contained archive with all signed action logs, session records, policy snapshots, and proof anchors for a given time range.

python
# Export a compliance bundle for the same period as a report
bundle = Asqav.ComplianceBundle.export(
    period_start="2026-01-01",
    period_end="2026-03-31",
    format="zip"
)

with open("compliance-q1-2026.zip", "wb") as f:
    f.write(bundle.data)

print(f"Bundle: {bundle.signature_count} signatures, {bundle.session_count} sessions")

Everything in the bundle is cryptographically linked - tampering with any record invalidates the bundle. See Audit Trails for more detail on bundle contents and integrity verification.