Skip to content
AppArch AppArch Docs

Generating a compliance report

The Compliance module aggregates the signals from the other modules into a single score and an audit-ready report.

1. Define policy rules

Section titled “1. Define policy rules”

Under Compliance → Policy, specify which controls apply (e.g. layer rules, security/OWASP, test coverage threshold, dependency policy). You define what compliance means.

2. Run a scan

Section titled “2. Run a scan”

The compliance score is derived from ArchPilot/ArchScan/ArchSecurity output. When you run these modules, the compliance score updates automatically; you can also trigger it manually from the panel with Compliance → Run scan.

3. Read the score and report

Section titled “3. Read the score and report”
  • Single compliance score - module outputs are reduced to a single, comparable score.
  • Gap analysis - shows line by line which rules failed.
  • Tracking over time - follow the score’s progression across versions.

4. Export the audit-ready report

Section titled “4. Export the audit-ready report”

Use Compliance → Report → Export to produce a shareable report you can hand directly to an auditor.