> Document Version: 1.0 Document Owner: Acme Inc Next Review Date: 2027-03-19

## Acme Inc — Compliance Status

Date: 2026-03-19

Project: nextjs-saas-example

## Compliance Gauge

      COMPLIANCE GAUGE
      [░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░] 0/100
       0    20    40    60    80   100
      Status: CRITICAL

Metric | Value
--- | ---
Score | 0/100
Grade | N/A
Status | Critical
Documents | 108
Services | 8

## Key Findings

### 1. Compliance Status: Critical

Acme Inc has compliance gaps requiring attention with a score of 0/100 (Grade: N/A). While 108 documents have been generated for 8 services, significant work is needed to reach an acceptable compliance level.

### 2. Top Risk: AI Regulatory Compliance

1 AI service(s) in use (openai). AI Disclosure is generated, but ongoing monitoring is needed as the EU AI Act enforcement begins August 2, 2026. Ensure AI risk classifications are reviewed quarterly.

Potential exposure: Up to EUR 35 million for non-compliance with AI Act obligations

### 3. Recommended Action: Initiate Compliance Remediation Program

The current compliance score indicates significant gaps. Recommend engaging legal counsel to review all generated documents, prioritizing Privacy Policy and Data Processing Agreements. Schedule a cross-functional compliance review within 30 days.

Timeline: Immediate — initiate within 1 week

## At a Glance

Area | Status
--- | ---
Privacy & Data Protection | Covered (3 docs)
Information Security | Covered (3 docs)
AI Governance | Covered (3 docs)
Vendor Management | Covered (2 docs)

## Services Overview

8 third-party services detected across 7 categories:

- monitoring: @sentry/node
- auth: @supabase/supabase-js
- ai: openai
- analytics: posthog
- database: prisma
- email: resend
- payment: stripe, stripe-ios

This Executive Briefing was auto-generated by Codepliant based on automated code analysis. It is intended as a summary for executive review and does not constitute legal advice. Consult legal counsel for compliance decisions.