Compliance export

Two export surfaces#

LumenFlow has two related compliance-export surfaces: a workspace-level promise summary, and an org-level audit-trail export.

What we promise (workspace level)#

Open Observe → Compliance at /dashboard/<workspaceId>/observe/compliance to see, in your compliance pack's own terms:

• Active promises — backed by a shipped control, sold today
• Roadmap, not sold — explicitly disclosed as not yet available
• Explicitly refused — claims the pack will never make, such as formal certification

This page also shows your current data-retention floor and whether legal hold is engaged. Use Export CSV or Export bundle (JSON) to download a summary of what's on screen. This is a workspace owner/admin action.

Audit-trail export (org level)#

Open the Trust page at /dashboard/trust to download a CSV or JSON export of the platform audit-event trail — who did what, when, across a chosen scope (platform, org, workspace, or all): pick a scope and a format, then Download audit export. This export is a plain projection of the audit log, not a signed artifact. For the cryptographic properties LumenFlow does provide, see Independently verifiable evidence: every evidence receipt is hash-chained, and receipts written since per-receipt signing was enabled also carry an Ed25519 signature that can be checked against the published public key.

Selecting a compliance pack#

GDPR, HIPAA, finserv, EU AI Act, and sovereign-residency packs are available per workspace. Select or deselect packs on Dashboard → Trust — each change is recorded on the platform audit trail. Packs are readiness postures for your own audit programme, not a certification badge.

Article 12 auditor pack#

From the same Trust dashboard, download an Article 12 auditor pack for a workspace — one on-demand evidence pack for EU AI Act Article 12 record-keeping. Generation can fail closed (for example when signing is not configured); the button reports that inline rather than inventing a pack.