Compliance Overview and Data inventory pages #37

Merged

jcoffey-dev merged 2 commits from feature/compliance-pages into main

2026-09-28 18:11:49 +00:00

jcoffey-dev commented

2026-09-28 18:07:20 +00:00

Owner

Two pages under Management › Compliance for anyone with sysComplianceGet:

Data inventory: every kind of personal data the catalog describes, evaluated against this server's settings (what, whose, where, how long, whether it leaves the server), with filters, and the hosts that receive some listed as candidate processors.
Overview: four counts, what's kept with no limit and which setting could limit it, the last 30 days of changes that affect review with who made them (audit-log readers only), and the inventory snapshot history.

Needs the server release that adds inbuxa:DataInventory, inbuxa:InventorySnapshot and the navigation entries (inbuxa-server #89, #92); deploy the two together. An older server shows a plain "doesn't report a data inventory" message.

Checked: typecheck, lint, inventory.test.ts (4 tests).

Two pages under Management › Compliance for anyone with `sysComplianceGet`: - **Data inventory**: every kind of personal data the catalog describes, evaluated against this server's settings (what, whose, where, how long, whether it leaves the server), with filters, and the hosts that receive some listed as candidate processors. - **Overview**: four counts, what's kept with no limit and which setting could limit it, the last 30 days of changes that affect review with who made them (audit-log readers only), and the inventory snapshot history. Needs the server release that adds `inbuxa:DataInventory`, `inbuxa:InventorySnapshot` and the navigation entries (inbuxa-server #89, #92); deploy the two together. An older server shows a plain "doesn't report a data inventory" message. Checked: typecheck, lint, `inventory.test.ts` (4 tests).

jcoffey-dev added 1 commit 2026-09-28 18:07:20 +00:00

Compliance Overview and Data inventory pages

ci / build (pull_request) Successful in 1m19s

Details

ci / publish (pull_request) Skipped

Details

a9a239a24b

Two pages under Management › Compliance, shown to anyone with
sysComplianceGet (the Compliance Officer roles, and administrators).

Data inventory lists every kind of personal data the catalog describes,
evaluated against this server's settings: what it holds, whose it is,
where it lives, how long it's kept and whether it leaves the server.
Filters by source, kind of data and place, with what the server
doesn't collect hidden unless asked for. Below the table, every host
that receives some, as candidate processors; whether a host is one is
the operator's call.

Overview gives four counts (kinds held, kept with no limit, sent off
this server, receiving hosts), the list of what has no limit and which
setting could limit it, the last 30 days of successful changes to
audit and log retention, tracers, webhooks, roles and legal holds with
who made them (for those who can read the audit log), and the
inventory snapshots with what changed between them.

Both pages need a server that answers inbuxa:DataInventory/get; an
older server gets a plain "doesn't report" message. The server schema
adds the navigation entries, so this console goes out together with
that server release.

jcoffey-dev added 1 commit 2026-09-28 18:10:09 +00:00

Item names keep IP, DKIM, DMARC and the like in capitals

ci / build (pull_request) Successful in 1m23s

Details

ci / publish (pull_request) Skipped

Details

bf07dd7bc0

jcoffey-dev merged commit bd0efae016 into main

2026-09-28 18:11:49 +00:00

jcoffey-dev deleted branch feature/compliance-pages

2026-09-28 18:11:49 +00:00

jcoffey-dev referenced this issue from a commit