← All documentation

Compliance Calendar

The Compliance Calendar gathers every compliance due date in one place, so nothing has to be remembered separately. Most of it is a read-only view — each item lives in its own feature, and the calendar surfaces and links to it. The exception is Compliance Activities (below), the calendar's own managed layer of recurring obligations.

What shows up

The calendar pulls due dates from across the app, for work that is still open:

  • Assessment due dates (assessments not yet completed or archived)
  • Remediation task due dates
  • Policy review dates
  • AI system review dates, including when an approval expires and a re-review is due
  • Access review due dates
  • Vendor review dates
  • Vendor questionnaire due dates, for questionnaires not yet answered
  • Training renewals (from a completion plus the course's renewal interval)

Each item appears only to people who could open it in its own register. If your organization has switched a module off in Settings → Organization → Features (vendors, training or access reviews), that module's dates leave the calendar and the iCal export too. Contributors see their own remediation tasks, vendor questionnaires are shown to admins, and an auditor sees only what their grant covers.

Compliance Activities (the managed program)

Manage activities opens your recurring compliance program: required activities drawn from a curated catalog (each with the framework outcomes it produces evidence for: an AI system inventory review, an AI risk register review, a third-party AI vendor review, an AI incident response exercise, and more, matched to the frameworks you use) plus any custom activities your admins add on their own cadence.

Each activity has a due date that advances when it's completed, an optional assignee (a team member, or an outside helper via an emailed no-account link), and a history of completions, postponements (a reason is required), and notes — a defensible record for auditors. Email reminders go out when an activity is due soon or overdue; Slack/Teams can be notified too. Org admins manage everything; assignees can complete and annotate their own items.

Until your organization adopts activities (or if the module is toggled off in Settings → Organization → Features), the calendar shows a few generic recurring AI governance activities as placeholders — your annual program assessment and, while the training module is on, a monthly AI training check. Once the managed program is running, those placeholders disappear in favor of your real, tracked activities.

Reading it

Items are grouped into Overdue, Recurring obligations, and Upcoming, each with a plain-language "in X days" / "X days overdue" label. Filter by type to focus on one kind of deadline, and click any item to jump straight to the record it came from.

Export

Export iCal downloads an .ics file you can subscribe to in Google Calendar, Outlook, or Apple Calendar, so your compliance dates sit alongside the rest of your schedule. The export comes with a plan; it is not in the demo.