> Document Version: 1.0 Document Owner: Acme Inc Next Review Date: 2027-03-19

Organisation: Acme Inc

Project: nextjs-saas-example

Generated: 2026-03-19

Services Scanned: 8

## Overall Compliance Grade

      ╔═══════════════════════════════╗
      ║                               ║
      ║        OVERALL GRADE           ║
      ║                               ║
      ║            [ B ]             ║
      ║          82% ↑              ║
      ║                               ║
      ╚═══════════════════════════════╝

## Area Scores

      Privacy               A  ████████████████████  100%
      Security              F  ████░░░░░░░░░░░░░░░░  55%
      AI Governance         A  ████████████████████  90%
      Vendor Management     B  ████████████████░░░░  80%
      Documentation         B  ████████████████░░░░  85%

## Score Summary

Area | Grade | Score | Trend
--- | --- | --- | ---
Privacy | A | 100% | ↑
Security | F | 55% | ↑
AI Governance | A | 90% | ↑
Vendor Management | B | 80% | ↑
Documentation | B | 85% | ↑
Overall | B | 82% | ↑

### Trend Indicators

- ↑ Improving (score >= 80%)
- → Stable (score 60-79%)
- ↓ Needs Attention (score < 60%)

### Grade Scale

Grade | Range | Description
--- | --- | ---
A | 90-100% | Excellent — meets or exceeds all requirements
B | 80-89% | Good — minor improvements needed
C | 70-79% | Fair — several areas need attention
D | 60-69% | Poor — significant gaps exist
F | 0-59% | Critical — immediate action required

## Detailed Assessment

### Privacy: A (100%)

      Privacy              ████████████████████ 100%

Factor | Detail
--- | ---
Met | Company name configured
Met | Contact email configured
Met | DPO email configured
Met | 4 jurisdiction(s) defined
Met | Data retention period set
Met | Toll-free number configured

### Security: F (55%)

      Security             ████░░░░░░░░░░░░░░░░ 55%

Factor | Detail
--- | ---
Action Needed | Security contact not set (-15)
Action Needed | Bug bounty URL not set (-10)
Met | Authentication service detected
Action Needed | No monitoring service detected (-10)
Met | Moderate service footprint

### AI Governance: A (90%)

      AI Governance        ████████████████████ 90%

Factor | Detail
--- | ---
Met | AI risk level classified: limited
Met | AI usage description provided
Met | Single AI provider (simpler governance)
Met | Company identity configured for AI disclosures

### Vendor Management: B (80%)

      Vendor Management    ████████████████░░░░ 80%

Factor | Detail
--- | ---
Met | 8 vendors (moderate)
Met | EU representative configured
Met | DPO available for vendor oversight
Met | Jurisdictions defined for transfer assessments

### Documentation: B (85%)

      Documentation        ████████████████░░░░ 85%

Factor | Detail
--- | ---
Met | Documents personalized with company name
Met | Rich service profile generates comprehensive docs
Met | Website configured for document references

## Priority Actions to Improve Score

1. [Security] Security contact not set
2. [Security] Bug bounty URL not set
3. [Security] No monitoring service detected

## Historical Tracking

> Use this template to track your compliance score over time.

Date | Privacy | Security | AI | Vendor | Docs | Overall | Trend
--- | --- | --- | --- | --- | --- | --- | ---
2026-03-19 | A | F | A | B | B | B | ↑
| _ | _ | _ | _ | _ | _ | _
| _ | _ | _ | _ | _ | _ | _

This Compliance Scorecard was generated by Codepliant based on automated code analysis and configuration review. Grades reflect configuration completeness and service profile, not full legal compliance. This document should be reviewed by qualified compliance professionals.