Skip to main content
Sign in →
SaaS

Compliance Reports

ShieldAgent automatically collects audit-trail evidence mapped to EU AI Act, ISO 42001, and NIST AI RMF controls. Generate a compliance report with one click from the dashboard.

Supported frameworks

EU AI Act

  • Article 26 deployer obligations
  • Article 12 record-keeping
  • Article 14 human oversight
  • Article 50 transparency disclosures

ISO 42001

  • Annex A controls
  • AI management system requirements
  • Risk treatment records

NIST AI RMF

  • Govern function
  • Map function
  • Measure function
  • Manage function

Generate a report

  1. 1.Go to Compliance → Reports → New Report.
  2. 2.Select the framework(EU AI Act, ISO 42001, or NIST AI RMF).
  3. 3.Set the date rangefor the audit period.
  4. 4.Select the tenants and agentsto include in scope.
  5. 5.Click Generate. For ISO 42001 and NIST AI RMF, ShieldAgent produces a PDF report with a per-control coverage breakdown, an evidence appendix when there is evidence to show, and a gap analysis when at least one control isn't fully covered.

EU AI Act's Article 26 deployer controls generate as JSON or CSV only from this screen — PDF export for EU AI Act is the dedicated Annex IV technical documentation report, a different document scope covering the base act's Annex IV points rather than the Article 26 deployer controls listed above.

Generated reports are available for download in Compliance → Reports at generation time; ShieldAgent does not separately store the PDF afterward. Annex IV technical documentation carries the EU AI Act Article 18 ten-year retention duty, which falls on you as provider — save your downloaded reports to meet it. Exporting the underlying audit trail is a separate capability; ShieldAgent's proxy audit events are supplementary evidence toward the deployer's separate Article 26(6) duty to keep the system's own automatically-generated logs for at least six months — whether they qualify as those logs is your own determination, and either way it is not the ten-year duty above.

What's included in the report

  • ▸Evidence appendix — included only when there is evidence to show, as a representative sample of up to 100 audit records for the selected period (the PDF states exactly how many of the total it shows)
  • ▸Per-control breakdown — coverage percentage, detection/enforcement status, and evidence count for every control the framework defines
  • ▸Gap analysis — included only when at least one control isn't fully covered, listing those controls with remediation guidance
  • ▸Scope & self-assessment disclaimer — states up front that this is a self-assessment, not a third-party audit or certification

Export Audit Trail →

Stream audit events to your SIEM, S3 bucket, or webhook

Compliance Reports