Reports
Reports aggregate your compliance data into structured documents ready for auditors, executives, and regulators. Claw GRC supports several report types, each designed for a specific audience and purpose.
Report Types
Compliance Summary Report
An executive overview of your compliance posture across all frameworks. Includes:
- Overall compliance score and trend
- Per-framework progress with control counts
- Evidence status summary (current, expiring, expired)
- Risk register summary by severity
- Key findings and remediation status
Framework-Specific Report
A deep-dive report for a single framework, covering every control:
- Control-by-control status (compliant, non-compliant, in progress)
- Evidence mapped to each control with freshness status
- Findings affecting each control area
- Related policies and their approval status
- Gap analysis showing what remains to achieve compliance
Evidence Report
A comprehensive inventory of all evidence artifacts:
- Evidence artifact details with file hashes for integrity verification
- Control mappings showing which requirements each artifact satisfies
- Freshness status with collection and expiration dates
- Validation status and reviewer information
Risk Report
The complete risk register with analysis:
- All risks with likelihood, impact, and calculated scores
- Treatment plans and their current status
- Risk owners and accountability assignments
- Trend analysis showing risk score changes over time
Audit Trail Export
A CSV export of the immutable audit log:
- Every action by every actor (human and agent)
- Chain hash values for tamper verification
- Timestamps, action types, and affected resources
- Filterable by date range, actor type, and action type
Generating Reports
- Navigate to Reports in the sidebar
- Click Generate Report
- Select the report type
- Configure options:
- Framework (for framework-specific reports)
- Date range (for audit trail exports)
- Format (PDF or CSV)
- Click Generate
Reports are generated asynchronously. You will receive a notification when the report is ready for download.
API Endpoints
| Method | Endpoint | Description |
|---|---|---|
GET | /api/v1/reports | List generated reports |
POST | /api/v1/reports | Generate a new report |
GET | /api/v1/reports/:id | Get report details and download link |
Tips and Best Practices
- Generate before audits -- Run a framework-specific report before your audit starts. Review the gaps and address them proactively.
- Schedule regular reports -- Generate compliance summary reports monthly for leadership visibility.
- Export audit trails regularly -- Download audit trail CSVs periodically and store them in an independent system for additional integrity assurance.
- Use evidence reports for gap analysis -- Sort by controls that lack evidence to prioritize your evidence collection efforts.