# Compliance Scorecard

> **Document Version:** 1.0  
> **Document Owner:** Acme Inc  
> **Next Review Date:** 2027-03-19


**Organisation:** Acme Inc
**Project:** nextjs-saas-example
**Generated:** 2026-03-19
**Services Scanned:** 8

---

## Overall Compliance Grade

```
  ╔═══════════════════════════════╗
  ║                               ║
  ║        OVERALL GRADE           ║
  ║                               ║
  ║            [ B ]             ║
  ║          82% ↑              ║
  ║                               ║
  ╚═══════════════════════════════╝
```

## Area Scores

```
  Privacy               A  ████████████████████  100%
  Security              F  ████░░░░░░░░░░░░░░░░  55%
  AI Governance         A  ████████████████████  90%
  Vendor Management     B  ████████████████░░░░  80%
  Documentation         B  ████████████████░░░░  85%
```

## Score Summary

| Area | Grade | Score | Trend |
|------|-------|-------|-------|
| Privacy | **A** | 100% | ↑ |
| Security | **F** | 55% | ↑ |
| AI Governance | **A** | 90% | ↑ |
| Vendor Management | **B** | 80% | ↑ |
| Documentation | **B** | 85% | ↑ |
| **Overall** | **B** | **82%** | **↑** |

### Trend Indicators

- ↑ Improving (score >= 80%)
- → Stable (score 60-79%)
- ↓ Needs Attention (score < 60%)

### Grade Scale

| Grade | Range | Description |
|-------|-------|-------------|
| A | 90-100% | Excellent — meets or exceeds all requirements |
| B | 80-89% | Good — minor improvements needed |
| C | 70-79% | Fair — several areas need attention |
| D | 60-69% | Poor — significant gaps exist |
| F | 0-59% | Critical — immediate action required |

## Detailed Assessment

### Privacy: A (100%)

```
  Privacy              ████████████████████ 100%
```

| Factor | Detail |
|--------|--------|
| Met | Company name configured |
| Met | Contact email configured |
| Met | DPO email configured |
| Met | 4 jurisdiction(s) defined |
| Met | Data retention period set |
| Met | Toll-free number configured |

### Security: F (55%)

```
  Security             ████░░░░░░░░░░░░░░░░ 55%
```

| Factor | Detail |
|--------|--------|
| Action Needed | Security contact not set (-15) |
| Action Needed | Bug bounty URL not set (-10) |
| Met | Authentication service detected |
| Action Needed | No monitoring service detected (-10) |
| Met | Moderate service footprint |

### AI Governance: A (90%)

```
  AI Governance        ████████████████████ 90%
```

| Factor | Detail |
|--------|--------|
| Met | AI risk level classified: limited |
| Met | AI usage description provided |
| Met | Single AI provider (simpler governance) |
| Met | Company identity configured for AI disclosures |

### Vendor Management: B (80%)

```
  Vendor Management    ████████████████░░░░ 80%
```

| Factor | Detail |
|--------|--------|
| Met | 8 vendors (moderate) |
| Met | EU representative configured |
| Met | DPO available for vendor oversight |
| Met | Jurisdictions defined for transfer assessments |

### Documentation: B (85%)

```
  Documentation        ████████████████░░░░ 85%
```

| Factor | Detail |
|--------|--------|
| Met | Documents personalized with company name |
| Met | Rich service profile generates comprehensive docs |
| Met | Website configured for document references |

## Priority Actions to Improve Score

1. **[Security]** Security contact not set
2. **[Security]** Bug bounty URL not set
3. **[Security]** No monitoring service detected

## Historical Tracking

> Use this template to track your compliance score over time.

| Date | Privacy | Security | AI | Vendor | Docs | Overall | Trend |
|------|---------|----------|----|--------|------|---------|-------|
| 2026-03-19 | A | F | A | B | B | B | ↑ |
| __________ | ___ | ___ | ___ | ___ | ___ | ___ | ___ |
| __________ | ___ | ___ | ___ | ___ | ___ | ___ | ___ |

---

*This Compliance Scorecard was generated by [Codepliant](https://github.com/joechensmartz/codepliant) based on automated code analysis and configuration review. Grades reflect configuration completeness and service profile, not full legal compliance. This document should be reviewed by qualified compliance professionals.*
