Skip to content
TruthVouch Docs

Audit-Ready Reports

Generate audit-ready compliance reports in minutes — automatically. Reports include system inventory, control assessments, gap remediation plans, and evidence mapping — everything an external auditor expects.

Audit trail showing evidence collection and control verification

Report Types

Audit-Ready Report (Comprehensive)

Complete documentation for external audit:

  • Contents: All systems, all frameworks, all controls, complete evidence
  • Format: PDF, OSCAL, or NDJSON
  • Audience: External auditors, regulatory bodies
  • Typical length: 50-200 pages depending on system count
  • Time to generate: 5-10 minutes

Includes: Executive summary, control-by-control assessment, evidence index, gap remediation plan, management sign-off template

Board-Level Report (Executive)

High-level compliance posture for leadership:

  • Contents: Overall compliance score, key risks, top gaps, budget needs
  • Format: PDF
  • Audience: Board, C-suite, CFO
  • Typical length: 8-15 pages
  • Time to generate: 2-3 minutes

Includes: Compliance score trends, risk heatmap, ROI of remediation investment, strategic recommendations

Custom Report

Build your own report:

  • Contents: Select systems, frameworks, controls, time period
  • Format: PDF, CSV, OSCAL
  • Audience: Specific stakeholder
  • Typical length: Variable
  • Time to generate: 2-5 minutes

How to Generate

  1. Go to Compliance > Reports > New Report
  2. Select:
    • Report Type (Audit-Ready, Board, or Custom)
    • Frameworks (all or subset)
    • Systems (all or selected)
    • Date Range (current, historical comparison)
    • Include: Trends, benchmarks, recommendations
  3. Click Generate

Report appears as PDF download; also stored in compliance repository for future reference.

What Auditors Expect

Audit-Ready Report should include:

  • ✓ System inventory (all AI systems in scope)
  • ✓ Risk classification per system
  • ✓ Compliance score per framework
  • ✓ Control status (Pass/Partial/Fail) for each control
  • ✓ Evidence supporting each control
  • ✓ Gaps identified with priority
  • ✓ Remediation plan (tasks, owners, due dates)
  • ✓ Management review sign-off
  • ✓ Incident response procedures
  • ✓ Training completion records

TruthVouch provides: All of the above automatically

Export Formats

PDF

Human-readable, professionally formatted. Best for sharing with external parties.

OSCAL

Machine-readable format used by GRC platforms (Archer, MetricStream, etc.). Enables automated workflow in GRC system.

NDJSON

One-JSON-per-line format. Import into spreadsheets or custom analysis tools.

Next Steps

  • Generate your first report: Go to Compliance > Reports > New Report
  • Track remediation: Remediation Tasks