Reports & Analytics

A branded, board-ready PDF report that provides an executive-level overview of your AI governance posture. Includes aggregate statistics across systems, use cases, and controls, risk distribution summaries, compliance status, and key governance metrics.

Time-series analytics showing governance portfolio evolution over configurable date ranges. Track changes in risk distribution, approval velocity, control effectiveness, and compliance posture over time.

Configure automated report generation on daily, weekly, or monthly schedules. Reports are generated at 3 AM EST and delivered via branded email to designated recipients. The number of scheduled reports is determined by your plan tier.

Cross-cutting reports that aggregate data across all governance modules:

• Summary Matrix — Risk Tier × Lifecycle Stage cross-tabulation showing the distribution of all registered AI systems
  All Tiers
• AI System Summary — Branded one-page PDF with 50+ fields covering identity, ownership, security, risk, and compliance
  Professional+
• Pending Reviews — Systems with review or approval expiration due within 30 days
  All Tiers
• Vendor Exposure — Vendor concentration risk analysis across the AI portfolio
  Professional+
• Ownership Gaps — Identifies systems with missing or incomplete ownership assignments
  Professional+
• Aging & Staleness — Flags systems with outdated reviews or stale governance data
  Professional+
• Time-to-Compliance — Registration-to-approval duration analytics measuring governance velocity
  Professional+
• Data Sensitivity — PII/PHI distribution map across AI systems showing data classification exposure
  Professional+
• Incident Density — Risk-tier incident correlation analysis showing incident counts by risk classification
  Professional+
• Full CSV Export — Complete data export of all system fields for offline analysis
  All Tiers

• Overview Dashboard — Controls by Risk Tier (pie chart) and Controls by Approval Status (bar chart)
  All Tiers
• AI Control Summary — Branded PDF with 35 fields covering identity, risk, ownership, and testing
  Professional+
• Control Effectiveness Trend — Tracks effectiveness scores over time across all controls
  Professional+
• Testing Compliance — Identifies controls with overdue or missing tests and upcoming test schedules
  Professional+
• KCI Performance Dashboard — Visualizes Key Control Indicator metrics across the control portfolio
  Professional+
• Full CSV Export — Complete data export aligned with the 35 summary report fields
  All Tiers

• Overview Dashboard — Use Cases by Risk Tier (pie chart) and by Approval Status (bar chart)
  All Tiers
• AI Use Case Summary — Branded PDF overview with submission-to-approval timeline, risk classifications, and cross-module mappings
  Professional+
• Full CSV Export — Complete data export of all use case fields for offline analysis
  All Tiers

Branded inventory exports of all AI applications detected across the org by the Shadow AI Browser Extension and Microsoft Graph API integration. Includes a sortable summary panel with totals for registered, unregistered, sanctioned, and high-risk apps, plus First Seen / Last Seen timestamps and detected model metadata.

• AI Discovery Report (PDF) — Branded landscape PDF with summary stat cards and a full inventory table including risk tier color coding
  Professional+
• AI Discovery Report (Word) — Branded DOCX with cover page, summary metrics, and complete app inventory
  Professional+
• Full CSV Export — Complete export of all discovered apps with discovery source, detection type, user counts, and risk scores
  All Tiers

Exports emit the AI_DISCOVERY_REPORT_EXPORTED event to the org and platform audit logs.

Tracks RAIC's coverage of all 38 ISO/IEC 42001:2023 Annex A controls. Each control can be marked Full, Partial, Gap, or N/A, with evidence summaries and reviewer notes. Coverage % excludes N/A controls from the denominator.

• Auto-Suggest — Seeds default statuses based on RAIC's built-in capability map; existing manual overrides are preserved.
• Per-Control Editor — Side drawer for status, evidence summary, notes, and last-reviewed metadata.
• Branded ZIP Export — RhindonCyber_ISO42001_AnnexA_Report.zip containing CSV control list, Markdown summary, raw JSON, and a manifest.json with SHA-256 checksums.

Gated by Professional/Enterprise tier and the per-org iso_42001_enabled toggle in Org Settings. Emits ISO_42001_AUTO_SUGGESTED and ISO_42001_REPORT_EXPORTED to the org and platform audit logs.

A single ZIP package generated server-side that consolidates the org's governance evidence into branded CSV files for auditor handoff. Scope can be set to the entire org, a single AI system, or a regulatory framework, with an optional date range and PII redaction toggle.

Bundle contents (8 files):

• RhindonCyber_EvidenceBundle_Manifest.txt — generation metadata and scope
• RhindonCyber_SystemRegister.csv
• RhindonCyber_ControlsRegister.csv
• RhindonCyber_UseCaseRegister.csv — now includes Linked Policies (pipe-delimited Title v#) and Linked Policy Count columns
• RhindonCyber_AttestationRecords.csv
• RhindonCyber_AuditLog.csv
• RhindonCyber_PolicyLibrary.csv — now includes Referenced By Use Cases (pipe-delimited Use Case IDs) and Use Case Reference Count columns
• RhindonCyber_UseCasePolicyLinks.csv — new mapping file with one row per use-case-to-policy link (use_case_id, use_case_name, policy_id, policy_title, policy_version)