# Compliance Digest — Acme Inc

> **Document Version:** 1.0  
> **Document Owner:** Acme Inc  
> **Next Review Date:** 2027-03-19


**Period:** Week/Month of 2026-03-19
**Prepared by:** Jane Mueller (dpo@acme-saas.com)
**Contact:** legal@acme.com
**Distribution:** Team Slack / Email

---

> **This digest summarizes your compliance posture for the current review period. Share it in Slack, email, or your team's preferred channel.**

---

## At a Glance

| Metric | Value |
|--------|-------|
| Services Detected | 8 |
| Documents Generated | 113 |
| Critical Doc Coverage | 100% |
| Categories | 7 |

---

## Changes Since Last Review

> Review the items below and update this section with any changes since your last compliance digest.

- [ ] New services added or removed
- [ ] Privacy policy updated
- [ ] Sub-processor list changed
- [ ] New data categories collected
- [ ] Incident response plan tested
- [ ] DSAR requests received or resolved

---

## Current Service Inventory

| Category | Count | Services |
|----------|-------|----------|
| Ai | 1 | openai |
| Analytics | 1 | posthog |
| Auth | 1 | @supabase/supabase-js |
| Database | 1 | prisma |
| Email | 1 | resend |
| Monitoring | 1 | @sentry/node |
| Payment | 2 | stripe, stripe-ios |

---

## New Risks & Observations

1. AI/ML services detected (openai). EU AI Act Art. 50 transparency obligations apply.
2. Payment processing active (stripe, stripe-ios). PCI DSS compliance required.
3. Analytics/monitoring active (@sentry/node, posthog). Ensure cookie consent and tracking disclosures are current.

---

## Upcoming Deadlines

- Quarterly compliance review (next scheduled review)
- Annual privacy policy update (check last update date)
- EU AI Act Art. 50 compliance — August 2, 2026 deadline
- DSAR response SLA — 30 days from receipt (GDPR)
- Data breach notification — 72 hours from discovery (GDPR Art. 33)

---

## Action Items

- [ ] Review any new or changed services since last digest
- [ ] Verify all generated documents are up to date
- [ ] Review AI Disclosure and AI Model Card for accuracy
- [ ] Confirm PCI DSS self-assessment questionnaire is current
- [ ] Check DSAR log for pending requests
- [ ] Update sub-processor list if vendors changed

---

## Document Status

| Document | Status |
|----------|--------|
| PRIVACY_POLICY.md | Current |
| TERMS_OF_SERVICE.md | Current |
| SECURITY.md | Current |
| AI_DISCLOSURE.md | Current |
| COOKIE_POLICY.md | Current |

---

## How to Use This Digest

1. **Weekly:** Share in your team Slack channel or standup
2. **Monthly:** Include in your compliance status report to leadership
3. **Quarterly:** Use as input for your formal compliance review meeting
4. **On change:** Re-run `codepliant go` after adding new services or dependencies

---

## Quick Commands

```bash
# Re-scan and regenerate all documents
codepliant go

# Check compliance status
codepliant check

# View compliance dashboard
codepliant dashboard

# Run in CI/CD pipeline
codepliant ci
```

---

*Generated by [Codepliant](https://github.com/joechensmartz/codepliant) on 2026-03-19. This digest is based on automated code analysis and should be reviewed by qualified personnel before distribution.*