Compliance Reports

Generate reports for auditors and compliance teams.

Report Types

Report	Description
audit_summary	Overview of all logged events
access_report	Who accessed what data
pii_report	PII detection and handling
hipaa_audit	HIPAA-specific attestation
gdpr_dsar	Data subject access request

Generate Report

curl -X POST https://api.gateflow.ai/v1/compliance/reports \
  -H "Authorization: Bearer gw_prod_..." \
  -H "Content-Type: application/json" \
  -d '{
    "type": "hipaa_audit",
    "period": {
      "start": "2024-01-01",
      "end": "2024-03-31"
    },
    "format": "pdf"
  }'

Response:

{
  "report_id": "rpt_abc123",
  "status": "generating",
  "estimated_completion": "2024-04-01T10:35:00Z"
}

Download Report

curl https://api.gateflow.ai/v1/compliance/reports/rpt_abc123/download \
  -H "Authorization: Bearer gw_prod_..." \
  -o hipaa_audit_q1.pdf

Scheduled Reports

curl -X POST https://api.gateflow.ai/v1/compliance/reports/schedule \
  -H "Authorization: Bearer gw_prod_..." \
  -H "Content-Type: application/json" \
  -d '{
    "type": "access_report",
    "schedule": "0 0 1 * *",
    "recipients": ["compliance@company.com"],
    "format": "pdf"
  }'

Report Contents

HIPAA Audit Report

• PHI access summary
• User access patterns
• Security incidents
• Control effectiveness
• Recommendations

GDPR DSAR Report

• All data held for subject
• Processing activities
• Third-party sharing
• Retention periods

Next Steps

• Audit Trail - Underlying data
• Litigation Holds - Legal holds