Regulator-ready reports, rendered from sealed evidence.

What Compliance Reports does

Korean K-SOX Schedule 3

External Audit Enforcement Rules Schedule 3 form for Korean Internal Control over Financial Reporting. Rendered against SAP and Oracle posting evidence; attached to the DART business report.

Japanese J-SOX Form 1

Financial Instruments and Exchange Act §24-4-4 Form 1 for the Internal Control Report. EDINET submission format with chain-cited evaluation results.

US SOX §404 — Form 10-K Item 9A

ICFR Management's Annual Report drawn directly from the sealed chain. Material Weakness disclosure language is auditable to its underlying evidence in one click.

Indian Companies Act §143(3)(i) — IFCoFR Auditor Report

Internal Financial Controls over Financial Reporting per the ICAI Guidance Note. SEBI LODR Reg 17(8) CEO/CFO certification draws from the same sealed evidence base.

US HIPAA Security Risk Analysis (45 CFR §164.308)

Risk analysis evidence for healthcare covered entities and business associates. PHI access events sealed at the moment they occur; HITRUST CSF Validated Reports inherit the same chain.

US PCI DSS v4.0.1 Report on Compliance (RoC)

QSA-submitted RoC template with pre-sorted evidence per requirement. Compensating Controls and remediation findings traced back to the sealed chain.

US NY DFS 23 NYCRR 500 Appendix A

Annual cybersecurity certification — both Material Compliance and Acknowledgment of Noncompliance forms. The backing evidence for either choice is cryptographically sealed.

Global SOC 2 Type II — System Description + Tests of Controls

AICPA Trust Services Criteria mapped to sealed evidence per control. The Tests of Controls bundle that auditors used to assemble by hand arrives pre-sorted.

IIA Five C's Audit Finding (Standard 2410)

Criteria, Condition, Cause, Consequence, Corrective Action — every internal audit finding aligned to the IIA structure with its sealed evidence link.

Evidence bundle export — third-party verifiable

Per-finding zip of underlying sealed evidence with chain proofs. Auditors verify each bundle independently against the chain root.

Architecture in one paragraph

The sealed transition chain already carries the ITGC evidence that SOX, K-SOX, J-SOX, and SOC 2 evaluate. Compliance Reports maps each form's fixed template onto that chain. Select scope, period, and applicable controls; the form renders with chain citations on every line. From the rendered PDF, an auditor reaches the underlying sealed evidence with one click and verifies it against the chain root.

Three concrete deployments

Annual K-SOX operating report (March filing)

A year of SAP and Oracle posting evidence renders into Schedule 3 directly. Consulting effort that traditionally took multiple months arrives pre-aggregated.

SOC 2 Type II audit window (6–12 months)

Trust Services Criteria evidence is sorted at the moment the audit begins. The Tests of Controls phase becomes a query.

NY DFS 500 April 15 deadline

Material Compliance certification is backed by cryptographically sealed evidence. The certifying officer signs against a verifiable record, not a manual rollup.

T1 Standard → T2 Defense

Most regulated enterprises render reports at the Standard tier. Public-company SOX scope with hardware-attested workstations moves to T2.

Versus what's deployed today

Today — Manual evidence assembly + spreadsheet pipeline

Evidence is hand-assembled from scattered sources (email, approval logs, DB audit, SAP change history) over multiple months, then additional hours are spent verifying that the evidence itself was not edited. Cost typically lands in the multiple-percent of annual revenue range for listed companies.

With DPSM — Compliance Reports

Evidence is sealed at the moment it occurs, so the report renders as a direct chain query. The collect-format-certify workflow that is normally assembled by hand is no longer the bottleneck.