Compliance Overview and Data inventory pages #37

Merged
jcoffey-dev merged 2 commits from feature/compliance-pages into main 2026-09-28 18:11:49 +00:00
2 Commits
Author SHA1 Message Date
jcoffey-dev bf07dd7bc0 Item names keep IP, DKIM, DMARC and the like in capitals
ci / build (pull_request) Successful in 1m23s
ci / publish (pull_request) Skipped
2026-09-28 11:10:05 -07:00
jcoffey-dev a9a239a24b Compliance Overview and Data inventory pages
ci / build (pull_request) Successful in 1m19s
ci / publish (pull_request) Skipped
Two pages under Management › Compliance, shown to anyone with
sysComplianceGet (the Compliance Officer roles, and administrators).

Data inventory lists every kind of personal data the catalog describes,
evaluated against this server's settings: what it holds, whose it is,
where it lives, how long it's kept and whether it leaves the server.
Filters by source, kind of data and place, with what the server
doesn't collect hidden unless asked for. Below the table, every host
that receives some, as candidate processors; whether a host is one is
the operator's call.

Overview gives four counts (kinds held, kept with no limit, sent off
this server, receiving hosts), the list of what has no limit and which
setting could limit it, the last 30 days of successful changes to
audit and log retention, tracers, webhooks, roles and legal holds with
who made them (for those who can read the audit log), and the
inventory snapshots with what changed between them.

Both pages need a server that answers inbuxa:DataInventory/get; an
older server gets a plain "doesn't report" message. The server schema
adds the navigation entries, so this console goes out together with
that server release.
2026-09-28 11:07:04 -07:00