> Document Version: 1.0 Document Owner: Acme Inc Next Review Date: 2027-03-19

Period: Week/Month of 2026-03-19

Prepared by: Jane Mueller (dpo@acme-saas.com)

Contact: legal@acme.com

Distribution: Team Slack / Email

> This digest summarizes your compliance posture for the current review period. Share it in Slack, email, or your team's preferred channel.

## At a Glance

Metric | Value
--- | ---
Services Detected | 8
Documents Generated | 113
Critical Doc Coverage | 100%
Categories | 7

## Changes Since Last Review

> Review the items below and update this section with any changes since your last compliance digest.

- New services added or removed
- Privacy policy updated
- Sub-processor list changed
- New data categories collected
- Incident response plan tested
- DSAR requests received or resolved

## Current Service Inventory

Category | Count | Services
--- | --- | ---
Ai | 1 | openai
Analytics | 1 | posthog
Auth | 1 | @supabase/supabase-js
Database | 1 | prisma
Email | 1 | resend
Monitoring | 1 | @sentry/node
Payment | 2 | stripe, stripe-ios

## New Risks & Observations

1. AI/ML services detected (openai). EU AI Act Art. 50 transparency obligations apply.
2. Payment processing active (stripe, stripe-ios). PCI DSS compliance required.
3. Analytics/monitoring active (@sentry/node, posthog). Ensure cookie consent and tracking disclosures are current.

## Upcoming Deadlines

- Quarterly compliance review (next scheduled review)
- Annual privacy policy update (check last update date)
- EU AI Act Art. 50 compliance — August 2, 2026 deadline
- DSAR response SLA — 30 days from receipt (GDPR)
- Data breach notification — 72 hours from discovery (GDPR Art. 33)

## Action Items

- Review any new or changed services since last digest
- Verify all generated documents are up to date
- Review AI Disclosure and AI Model Card for accuracy
- Confirm PCI DSS self-assessment questionnaire is current
- Check DSAR log for pending requests
- Update sub-processor list if vendors changed

## Document Status

Document | Status
--- | ---
PRIVACY_POLICY.md | Current
TERMSOFSERVICE.md | Current
SECURITY.md | Current
AI_DISCLOSURE.md | Current
COOKIE_POLICY.md | Current

## How to Use This Digest

1. Weekly: Share in your team Slack channel or standup
2. Monthly: Include in your compliance status report to leadership
3. Quarterly: Use as input for your formal compliance review meeting
4. On change: Re-run `codepliant go` after adding new services or dependencies

## Quick Commands

    # Re-scan and regenerate all documents
    codepliant go

    # Check compliance status
    codepliant check

    # View compliance dashboard
    codepliant dashboard

    # Run in CI/CD pipeline
    codepliant ci

Generated by Codepliant on 2026-03-19. This digest is based on automated code analysis and should be reviewed by qualified personnel before distribution.