← All documentation

Calendar

The Compliance Calendar gathers every compliance due date in one place, so nothing has to be remembered separately. Most of it is a read-only view — each item lives in its own feature, and the calendar surfaces and links to it. The exception is Compliance Activities (below), the calendar's own managed layer of recurring activities.

What shows up

The calendar pulls due dates from across the app, for work that is still open:

  • Assessment due dates (assessments not yet completed or archived)
  • Task due dates
  • Policy review dates
  • AI system review dates, including when an approval expires and a re-review is due
  • Access review due dates
  • Vendor review dates
  • Vendor questionnaire due dates, for questionnaires not yet answered
  • Vendor agreement end dates (a BAA, a DPA), for active vendors, until a later agreement of the same type replaces it
  • Training renewals (from a completion plus the course's renewal interval)
  • Bias audit due dates: a year after the latest bias audit of an AI system that is not retired or rejected

Each item appears only to people who could open it in its own register. If your organization has switched a module off in Settings → Organization → Features (vendors, training or access reviews), that module's dates leave the calendar and the iCal export too. Contributors see their own remediation tasks, vendor questionnaires are shown to admins, and an auditor sees only what their grant covers.

Your compliance year

The Your year tab states each activity your program repeats once: the program assessment and the risk analysis of each kind you work in, policy reviews, training renewals, access reviews, agreement renewals, the management review, and each managed activity. Each row says when it was last done, when it is next due and where it stands (Overdue, Due soon within the next two months, On track, Nothing scheduled when records exist but none sets a next date, or Not started), grouped by the quarter it falls due in.

The dates come from your records. Where a record sets its own next date (an open assessment's due date, a risk analysis's review date, the next date a management review set, an activity's due date), that date is used. Where nothing does, the next program assessment, risk analysis, access review and management review is planned a year after the last. That is a planning default, not a legal deadline: a rule or framework may set its own interval, so check the provision your program follows. Each row is shown only to people who could open its register.

Compliance Activities (the managed program)

Manage activities opens your recurring compliance program: required activities drawn from a curated catalog (each with the framework outcomes it produces evidence for: an AI system inventory review, an AI risk register review, a third-party AI vendor review, an AI incident response exercise, and more, matched to the frameworks you use) plus any custom activities your admins add on their own cadence.

Each activity has a due date that advances when it's completed, an optional assignee (a team member, or an outside helper via an emailed no-account link), and a history of completions, postponements (a reason is required), and notes — a defensible record for auditors. Email reminders go out when an activity is due soon or overdue; Slack/Teams can be notified too. Org admins manage everything; assignees can complete and annotate their own items.

Until your organization adopts activities (or if the module is toggled off in Settings → Organization → Features), the calendar shows a few generic recurring AI governance activities as placeholders — your annual program assessment and, while the training module is on, a monthly AI training check. Once the managed program is running, those placeholders disappear in favor of your real, tracked activities.

Reading it

Items are grouped into Overdue, Recurring activities, and Upcoming, each with a plain-language "in X days" / "X days overdue" label. Filter by type to focus on one kind of deadline, and click any item to jump straight to the record it came from.

Home's Coming up shows the next few dated items from the same calendar. A recurring activity that is due now, such as a program assessment never completed, is named there in red too, whether or not other items are listed (an AI governance activity is not, for an organization that answered No to using AI).

Export

Export iCal downloads an .ics file you can subscribe to in Google Calendar, Outlook, or Apple Calendar, so your compliance dates sit alongside the rest of your schedule. The export comes with a paid plan; it is not on the Free plan.