# ComplianceBot ## About ComplianceBot ComplianceBot leverages cutting-edge AI to simplify and accelerate compliance processes, focusing on frameworks like **HIPAA** and **SOC-2**. It is tailored for **health technology companies** looking for efficient, cost-effective ways to achieve and maintain compliance standards. We infuse AI across the compliance management features such as continuous compliance, policy management, evidence tasks, vendor management and a meeting assistant. Check out more at [https://compliancebot.io/ ](https://compliancebot.io/) An overview of the product can be seen below. {% embed url="" %} ## Our Features Some of the top features of ComplianceBot are listed below. * **AI Assisted Onboarding** - Users can achieve HIPAA and SOC-2 compliance quickly—within 30 minutes—by answering a series of targeted questions. Leveraging AI, the system handles the remaining tasks, ensuring a streamlined and efficient compliance process.
* **Policy Management and Authorization Workflows** - The platform generates and maintains all the necessary documentation required for HIPAA and SOC-2 compliance, ensuring comprehensive and up-to-date records.
* **Employee Training** - Beyond the compliance team and related authorizers, other members of the company may need to be provided with compliance training.
* **Continuous Compliance (in progress)** - ComplianceBot provides connectors to external systems to automate evidence collection. The list of supported connectors will continue to grow based on market feedback. Initially the cloud platforms will be supported (AWS, GCP, Azure)
* **Task Discovery (future) and Management** - Gen AI used to extract tasks from procedure documents.
* **ASync Meetings and AI Note Taker** - This innovative and patent pending feature is a Slackbot that enables users to meet asynchronously on channels such as Slack with a customized AI note taker that has knowledge about the program.
* **Questionnaire Responder (future)** - Use Gen AI to generate authoritative responses to the questionnaires based on the company’s compliance program. # AI Assisted Onboarding ## Overview ComplianceBot offers a revolutionary AI-assisted onboarding process designed to streamline and accelerate the establishment of your organization's compliance programs. With this innovative platform, organizations can implement both HIPAA and SOC-2 compliance frameworks in less than 30 minutes through a fully self-service experience. ComplianceBot’s AI-driven approach empowers users to independently set up their compliance programs without the need for sales or demo calls, saving valuable time, effort, and resources. This ensures a seamless, efficient, and hassle-free compliance journey.

Onboarding with Other Tools vs ComplianceBot

### Key Features * **Self-Serve Model:** Users can start the onboarding process on their own without requiring assistance from sales or support teams. * **Gen-AI Integration:** Utilizes generative AI to create targeted policy documents tailored to the specific needs of the organization. * **Automated Policy Creation:** AI generates policies and procedures based on user inputs and industry best practices within minutes. * **Customizable Controls and Policies:** Pre-selected answers and suggested controls can be easily customized to fit the organization's unique requirements. * **Human-in-the-Loop:** Ensures human oversight in reviewing and adjusting AI-generated documents for accuracy and relevance ### Onboarding Steps You can get started quickly by watching the 4 minute video below and / or follow the detailed steps below. {% embed url="" %} AI Assisted Onboarding with ComplianceBot {% endembed %} **1. Account Creation and Email Verification** Users create an account by providing their details and verify their emails.

First, create your account by filling in your First Name, Last Name, Email, and Password. Click ‘Sign Up’. Then, verify your account by checking your email.

**2. Organization Profile Setup** * Users enter their organization’s name and set up the compliance program by providing the necessary details.

**Choose Framework to get started-**

**3. Customizable Pre-Selected Answers** * ComplianceBot presents pre-selected answers to compliance questions based on best practices for the chosen program for similar organizations. * Users can customize these responses to align with their organization’s specific needs. * After customization, users click "Save and Continue" to proceed.

**4. Control Selection** * The system suggests appropriate controls based on the provided answers and industry standards. * Users can modify these controls as needed before saving and continuing.

**5. Automated Policy and Procedure Creation** * ComplianceBot’s AI generates tailored policies and procedures, a process that typically takes between 5 to 20 minutes. * Users can monitor the progress and view the estimated time remaining.

**6. Review and Edit Policies** * Once the AI has generated the policies and procedures, users can review each document. This human-in-the-loop ensures that we are not entirely dependent on Gen-AI. * Necessary adjustments can be made to ensure that the documents meet the organization’s requirements. * This step involves human oversight to validate and refine the AI-generated content.

**7. Completion and Certification** * After reviewing and confirming the policies, users complete the onboarding process.

* ComplianceBot provides a downloadable *Certificate of Compliance*, signifying that a HIPAA Or SOC-2 compliance program is in place.

This concludes the onboarding process. After this, the user can navigate to the Dashboard. # Dashboard ## **Overview** The ComplianceBot dashboard is a powerful tool designed to give a comprehensive overview of an organization’s compliance status. It provides a visual representation of key metrics and statuses across the product

# Accessing Compliance Dashboard To navigate to the '**Dashboard**' section in ComplianceBot, follow these steps: 1. From the left navigation menu, click on "Dashboard" 2. Upon clicking, the compliance dashboard opens and you can see your organization's compliance posture.

### Compliance Status Widgets The Compliance Status Widgets at the top of the Dashboard provide a clear assessment of your organisation's readiness across Policies, Evidence Tasks and Procedures. They measures compliance effectiveness through a percentage scale, where a higher percentage indicates greater organisational compliance readiness.

**1. Control Status** * **Completed**: Indicates the number of controls that have been fully implemented. * **Incomplete**: Shows controls that have been started but not yet completed. * **Pending**: Reflects controls that have yet to be initiated. **2. Policy Status** * **Published**: Displays the number of policies that have been published and are active. * **Not Published**: Indicates policies that have been created but are not yet published. **3. Procedure Status** * **Published**: Shows the number of procedures that have been documented and published. * **Not Published**: Reflects procedures that are either in draft form or have not been published. **4. Evidence Status** * **Good Standing**: Indicates evidence that is up-to-date and meets compliance requirements. * **Not Started**: Shows evidence tasks that have not been initiated. # Understanding Control Details **Control Details** Controls are essential for managing compliance in ComplianceBot and include policies, procedures and evidence that safeguard assets, ensure data integrity and meet regulatory requirements. These safeguards help mitigate risks and improve security. **Applicability:** During Onboarding, organizations can choose applicable controls based on their needs. For instance, physical security rules might not be relevant for those using only cloud services like AWS or GCP.

# Managing Controls ### **Edit Controls** Editing controls allow users to modify the details or applicability of a control to better fit their organization’s operational model or compliance requirements. **Search Control:** First, search for the relevant control with the search tool.

Click **"Edit"** **Select Control:** Choose the control from the list.

**Confirm** and **save** the changes to update the **control status** and details within the dashboard. **Marking as**** *****Not Applicable*****:** If a particular control does not apply to the organization—for example, if certain physical security measures are irrelevant for a cloud-based infrastructure—users can designate that control as ***"Not Applicable."*** ### **Removing and Attaching Policies, Procedures and Evidence** **Choose the Specific Control:** Select the control to which you want to attach or remove documents/evidence. **Click the "Attach" or "Remove" Button:** Initiate the attachment process by clicking the "Attach" button and remove process by clicking the "Remove" button **Upload Relevant Files:** Upload or Remove the relevant policy, procedure or evidence file. **Confirm and Save Changes:** Confirm the attachment and save the changes to update the control.

# Policy Management ## Overview Policy management is needed for comprehensive compliance management. Policies and their associated procedures form the foundation of a good compliance management practice. A policy is a set of rules for an organization to follow to achieve a certain goal such as compliance. Correspondingly, procedures are the step-by-step instructions for how, when and where these policies that have been outlined will be achieved.

Policy Management involves organizing, controlling, and maintaining documents such as policies, procedures, and contracts. It ensures that an organization adheres to laws, regulations, industry standards It is very important for a company to avoid any confusion and to make sure that these policies and procedures are documented in one place. ComplianceBot provides a comprehensive set of features to help with this documentation to publish, track approve, version and archive these policy and procedure documents. Review the video below for details about the Policy Management feature. {% embed url="" %} # Accessing Policy Management Follow these steps to navigate to the '**Policy Management**' section in ComplianceBot dashboard : 1. From the main menu, select '**Policy Management'**. 2. This section is dedicated to organizing and managing all compliance-related documents.

# Policy Management Workflow The Policy Management workflow organizes, stores, and manages compliance documents efficiently.. ComplianceBot's features ensure accuracy, compliance, and easy document retrieval throughout each step. More details are in the video below: {% embed url="" %} # Create Documents **Create a Document :** The compliance manager uses ComplianceBot's Policy management feature to start a new document workflow * Navigate to **Policy Management**. * To create a new document:

* Click on the **Create** button. * Fill in the necessary details: * **Document Name** * **Description** * **Location for your document** * **Document Format** * Select a **recurrent schedule** if needed. This will determine how often the document needs to be reviewed. * Lastly, click on the **Save** button to create your document. # Edit Document **To Edit Documents** The compliance manager invites editors to collaborate on the document using ComplianceBot. Editors can be subject matter experts, legal advisors, or other stakeholders responsible for contributing to the document's content.

### Edit Document ### To add an editor : 1. Click on the document you want to update. 2. On the Document Details page, click **Add Editors.** 3. Select the editors you wish to add. 4. Set the due date and add a comment if needed. 5. Finally, click **Save**.

### To edit an editor : 1. Click the **Edit** icon. 2. Make the necessary changes. After the editor completes their edits, the status will be marked as **Complete**.

### To delete an editor: 1. Click the **Delete** icon. 2. Click **Yes, Remove**.

Editors can access the document via the **Edit Document** option on the Document Details page to contribute their expertise and insights.

Once editors complete their editing, they can click **Complete Edit** on the Document Details page to finalize their contributions.

# Manage Documents Once editors complete editing, ComplianceBot notifies the Compliance Manager via email thereby prompting the initiation of the approved workflow. The Compliance Manager reviews the document's edits and proposes changes or additions using ComplianceBot's **Request Change** functionality.

# Approve Documents **To Approve Documents** After the editors finalize their revisions, the compliance manager uses ComplianceBot to invite the **relevant approvers**, usually **senior management or legal authorities,** to review and approve the document.

Approvers will review the document submitted in ComplianceBot. They have the following options:

**Request Modification** Editors make the necessary modifications and mark the edits as **complete**. The Compliance Manager and editors are notified of the change requests.

# Published Documents ### **To publish a document:** Once all necessary approvals have been secured, the Compliance Manager proceeds to publish the document: 1. The Compliance Manager clicks the **Publish Document** button to publish the document.

Publishing ensures the document reaches the relevant stakeholders within the organization or a broader audience, as required Once published, the document appears in the Published section as an official compliance document.

### **To view a published document:** * Navigate to the **Published section** with all approved documents. * Locate your desired document from the list. * Click the three dots beside the document. * Choose "**View Document**" from the menu.

### **To initiate a new version of a published document:** 1. Click on the three dots and select **Create New Version**. 2. Choose the version type, assign editors, set a due date, and click **Save**. The new version will be accessible in the Attention Required section. 3. To invite editors and approvers and publish the document, follow the same steps as when creating a new document.

### **To add readers to a published document** 1. Click on the three dots and select **Add Readers.** 2. Choose the readers you want and click **Done** 3. To add someone with their email, click **Add More Viewers** in the Add Reader section. 4. Enter the user's first name, last name, and email. Select the roles you wish to assign, and if the user is external, enable external sharing. 5. Finally, click **Add**.

# Archived Documents ### **To archive a published document:** 1. Click on the three dots and select **Archive Document**. The document will now be accessible in the Archived section. 2. To unarchive a document, click **Unarchive**.

# Import Document ### **To import a document into Compliance Bot:** 1. Go to the Published section, click **Import,** and select **I**[**mport Document**.](#user-content-fn-1)[^1] 2. Enter the document name and description. 3. Choose a location for your document. 4. Upload the document and select a recurrent schedule if needed. 5. Finally, check the box that says, "I have reviewed the document and am approving it using the above signature," and click **Save** at the bottom. Importing a template also follows the same structure.

### To renew a document To renew a document from the Ready for Renewal section, follow these steps: * Navigate to the section where documents that have passed their **renewal period** are displayed.

* Find the document you need to renew * Click on "**Continue with Current Version**. **This will initiate the renewal process for the document, keeping the current version in use.**

[^1]: # Training Management ## **Overview** An effective compliance management program requires regular organizational training.\ \ It is not enough for policies and procedures to be created and published if no one is aware of what they involve and what their obligations are. Therefore it becomes critical for a company to regularly train their employees on their compliance obligations. Some programs such as a HIPAA mandate this and require regular evidence to be collected that the training has been disseminated to employees.

An effective compliance management program requires regular organizational training to ensure employees are aware of their compliance obligations. ComplianceBot provides a robust platform for setting up, orchestrating, and tracking compliance training, with built-in features for managing training campaigns, tracking employee progress, and maintaining evidence for audits.\ \ The video below outlines the Training Management features in ComplianceBot. {% embed url="" %} # Accessing Training Management To navigate to the '**Training"** section in ComplianceBot dashboard , follow these steps: 1. From the main menu, select **"Training "****.** 2. This section is dedicated to organizing and managing all compliance-related training activities, including scheduling, tracking completion, and ensuring adherence to training requirements.

# Training Management WorkFlows Training Management in ComplianceBot provides a platform to set up, orchestrate and track organizational training. The video below provides more details on the Training Management feature in ComplianceBot.
{% embed url="" %} # Create Training Program **1. Add New Campaign** * Click the **Add New** button and select **Create Training Campaign**.

* Enter the **title**, **description**, and **welcome message**. * Set the **start and end dates**, select **trainee groups**, **individual users**, **document groups**, and **documents**. Optionally, add **external documents**.

#### 2. Set Recurrence * Define the **recurrence for the training campaigns** (e.g., semi-annually or annually) to ensure regular training. * ComplianceBot automatically initiates training campaigns based on the set frequency.

#### **3. Finalize Campaign** * Click **Create** at the top right. * Employees within the selected training group will receive notifications and access to the training materials

# Edit Training Program ### **Edit Campaign:** * Click **Edit Campaign**.

* Make the desired changes to the campaign details.

* Click **Save** at the top right to apply the edits. # Assign Training Program * ComplianceBot will automatically send notifications to the selected employees via Slack and email, informing them about the new training program. * Notifications will include a clear message and direct links to the training area within ComplianceBot * An example email is shown below :

# Employee Training Program **Employee Training Process:** **1. Access Training Materials :** * Employees log into ComplianceBot using their **credentials.**

* They access required documents such as policy documents, compliance manuals, and other relevant materials.

**2. Complete Training :** * Employees review the training materials at their own pace, ensuring they understand the content thoroughly.

* After reviewing the materials, employees mark their training as complete by clicking on the **"Complete Training"** button.

#### 3. Record Keeping ComplianceBot automatically records the completion of training. This allows compliance managers to have full visibility into each employee's training status, ensuring compliance with company policies and regulatory requirements.

# Reopen Training Program #### To Reopen A Campaign To reopen a training campaign, follow these steps: 1. Click on "**Reopen Campaign**" within the Training Management section. 2. Add the desired users for the campaign. 3. Click **"Reopen"** at the top right corner to relaunch the campaign.

# Continuous Compliance The **Continuous Compliance (CC)** feature in **ComplianceBot (CB)** is designed to empower users by providing real-time insights into their security and compliance posture. This feature enables organizations to connect to various cloud applications, gather security-related data, and continuously monitor their compliance against key industry frameworks such as HIPAA, SOC 2. The goal is to offer a comprehensive understanding of the security landscape and proactively manage risks by ensuring continuous compliance. # AWS Integration with ComplianceBot Integrating AWS with ComplianceBot helps automate compliance checks, ensuring your infrastructure aligns with regulatory standards. This guide walks you through the step-by-step process of integrating AWS with ComplianceBot. To navigate to the **'Integrations**' section in the ComplianceBot dashboard, follow these steps: * **Access Settings**: Log in to ComplianceBot and go to the **Settings** menu from the main navigation panel. * **Select Integrations**: Within Settings, click on the **Integrations** tab to view the list of supported cloud platforms * **Select AWS**: From the list of available integrations, choose **AWS**. * **Click “Integrate”**: Click on the **Integrate** button to begin the AWS integration process.

#### Obtain the CloudFormation Template Link **Copy the Template Link**: ComplianceBot will provide a CloudFormation template link. Copy this link; it will be used in the AWS Console setup.

**Set Up in AWS Console** **Log into AWS Console**: Open your AWS account and navigate to the CloudFormation service. **Create a Stack**: * Click “**Create Stack**.” * In the Prerequisite section, select “**Choose an existing template**.” * Choose "**Amazon S3**" and paste the copied **CloudFormation template link**. * Click “**Next**” to proceed.

#### Configuring AWS Stack **Enter Stack Name**: Provide a stack name of your choice in the designated field.

**Configure Settings**: Keep the default settings and click **“Next”** to continue. **Review and Submit**: * Review the stack configuration details to ensure accuracy. * Click **“Submit”** to create the stack.

#### Wait for Stack Creation **Monitor Creation**: Wait until the stack creation status is complete. **Go to Outputs Tab**: Once complete, navigate to the **"Outputs"** tab to retrieve necessary credentials.

#### Enter AWS Credentials in ComplianceBot **Copy Access Keys**: From the Outputs tab, copy the Access Key and Secret Access Key.

**Paste Keys in ComplianceBot**: Enter these keys in the corresponding fields in ComplianceBot’s AWS integration settings.

**Enter AWS Account Name**: Provide your AWS account name in the specified field.

#### Configure Sync Options **Choose Sync Type**: Select either automatic or manual syncing. * For automatic syncing, set the preferred frequency (e.g., daily, weekly). * For this example, we’ll proceed with manual syncing.

#### Test the AWS Connection **Test Connection**: Click “Test Connection” to ensure the integration is successful. **Save Settings**: If the test is successful, click “Save” to finalize the integration. #### Running Manual Sync **Manual Sync**: Since we chose manual sync, click “Manage” under AWS within ComplianceBot. **Click “Sync Now”**: This action will run compliance checks on your AWS infrastructure. **Monitor Sync Status**: Wait for the sync status to update to “Success.” Results will be available in the cloud section. #### # GCP Integration with ComplianceBot **Integrating GCP** with **ComplianceBot** allows you to monitor your cloud infrastructure's compliance posture, ensuring adherence to industry standards. This guide will walk you through setting up the integration, running compliance checks, and understanding your compliance results in ComplianceBot To navigate to the **'Integrations**' section in the ComplianceBot dashboard, follow these steps: * **Access Settings**: Log in to ComplianceBot and go to the **Settings** menu from the main navigation panel. * **Select Integrations**: Within Settings, click on the **Integrations** tab to view the list of supported cloud platforms * **Select GCP**: From the list of available integrations, choose GCP. #### Sign into GCP and Select Your Project * **Sign into GCP**: Log into your Google Cloud Platform account. * **Select Your Project**: Choose the project where you want to create a service account for ComplianceBot integration.

#### Create a Service Account * **Navigate to IAM & Admin**: Go to the GCP Console, select “IAM & Admin” and click on “Service Accounts” from the left panel.

**Create a Service Account**: Click on “Create Service Account” and fill in the required fields: * **Service Account Name** * **Service Account ID** * **Description** **Create and Continue**: Click “Create and Continue” to proceed.

#### Assign Permissions #### **Assign Viewer Permissions:** Assign the role “Viewer” to the service account for read-only access. **Complete Setup**: Click “Continue,” then “Done” to finish creating the service account.

#### Generate and Download Keys **Access the Service Account**: Click on the service account you just created.

* **Navigate to the Keys Tab**: Go to the “Keys” tab and click “Add Key.”

* **Add a New Key**: Select “JSON” as the key type, and a key file will be downloaded to your device.

**Integrate GCP in ComplianceBot :** Within Settings, click on the **Integrations** tab to view the list of supported cloud platforms Provide your **GCP** account name in the specified field.

**Configure Sync Options** **Choose Sync Type**: Select whether you want data to sync automatically or manually. * If automatic, set the frequency (e.g., daily, weekly). In this example, we’ll proceed with manual syncing. * Upload the previously downloaded JSON key file into ComplianceBot.

#### Test the Connection * **Test Integration**: Click “Test Connection” to verify the GCP integration. * **Save Settings**: Once the test is successful, click “Save” to finalize the integration. #### Run Manual Compliance Checks **Initiate Sync**: Go to the “Manage” section under GCP and click “Sync Now.” **Monitor Sync Status**: Wait for the sync status to update to “Success.” This process checks your GCP resources for compliance and security issues. **View Results**: Results will be available in the cloud section once the sync is complete.

#### Navigate the ComplianceBot Dashboard **Access the Cloud Section**: View the results of your compliance checks by navigating to the cloud section. * **Summary**: Get a quick overview of your compliance status, including passed and failed tests. * **Resource Breakdown**: View resources categorized by compliance status: compliant, warning, or danger. * **Severity Categorization**: Failed tests are sorted by severity, allowing you to prioritize critical issues.

#### Utilize Filters for Detailed Views * **Framework Filter**: Filter tests based on specific compliance standards like HIPAA.

* **Connector Filter**: Select a particular cloud provider (e.g., AWS, GCP) to focus on its resources.

* **Account Filter**: Narrow results to a specific cloud account for detailed review.

* **Service Filter**: Focus on specific services, such as Compute Engine or Storage.

**Explore the Tests Tab** Access the Tests tab for detailed test outcomes. * **Danger**: Critical issues. * **Warning**: Non-critical issues. * **Compliant**: Passed tests.

Managing Test Results **Ignoring a Test**: * Click the ignore symbol on the right side of the test to move it to the “Ignored” section. * Ignored tests will no longer impact your compliance score. **Include Ignored Tests**: Toggle the “Include Ignored Tests” switch to view previously ignored tests in Export Test Results **Export Results**: Click the “Export” button to download your compliance test results for reporting or further analysis.your results.

# Evidence Tasks ## Overview As part of any compliance program, an organization should be ready for internal or external audits. With any program, creating policies and procedures are the first step to a **good compliance program** but are not sufficient . Organizations also continuously need to collect and document evidence of compliance against their stated policies. **Evidence Tasks** involve systematically collecting, storing, and managing evidence for compliance and security audits. These activities include gathering evidence from various sources, organizing and storing it. More details about the *Evidence Tasks* feature is in the video below: {% embed url="" %} # Accessing Evidence Task To navigate to the '**Evidence Task**' section in ComplianceBot dashboard , follow these steps: * Access the **Settings** menu from the main navigation panel. * Within **Settings**, click on the Tasks section to open the tasks management area. # Evidence Task Workflow An **evidence task workflow** in audits manages the collection, storage, review, and reporting of evidence. Key steps include identifying evidence, assigning tasks, tracking progress, validating evidence, reporting, and process improvement for new regulations. ComplainceBot provides a comprehensive tool to manage and record such evidence against an organization’s policies. More details about the Evidence Tasks workflow is in the video below: {% embed url="" %} # Create an Evidence Task ### Creating a Task The process of creating a new task in ComplianceBot involves defining its parameters and requirements. * Navigate to **Settings,**Click on **Tasks**. * Click on **Add Task** at the top right.

* Enter the task's **Name**, **Purpose**, **Description**, and **Slack Channel Name.** * Select the relevant **Committee**, **Program**, **Task Status**, **Time to Run the Task**, **Schedule**, **and** **Allow Duration**. * Attach the necessary **Documents** to be reviewed. * Click **Submit.**

# Edit Evidence Task ### **Editing a Task** To modify an existing task in ComplianceBot, update its details such as the title, purpose, description, committee name, Slack channel, schedule, or meeting information. This ensures the task remains aligned with current requirements and priorities. * Navigate to **Settings** and click on **Tasks**. * Click the dropdown arrow next to the task you want to edit. * Click the **Edit Icon** to modify the **Title**, **Purpose**, **Description**, **Committee Name**, **Slack Channel Name**, **Schedule**, or **Upcoming Meeting Details**. * Make the necessary changes. * Save the changes.

# Run Evidence Task ### **Running a Task** Running an evidence task involves executing the steps outlined in the evidence task workflow to ensure all required evidence is collected, reviewed, and reported effectively. Here’s a step-by-step guide to running an evidence task: * Navigate to Tasks and click **Run.** * **ComplianceBot** assists in preparing review materials and shares them over the **Slack channel.**

* Committee members mark presence by typing **"present"** in the channel. * After the task is complete, **click Stop**.

* ComplianceBot prepares meeting minutes and provides a link for access.

# Evidence Management The **Evidence Management** feature in ComplianceBot allows users to efficiently attach and remove evidence to and from tasks. This helps in maintaining compliance records and ensuring that all necessary evidence is documented. **To attach evidence:** * Go to the **Dashboard** section of ComplianceBot. * Click the three dots (ellipsis) on the control where you want to upload the evidence task. * In the **Control Overview** section, go to the **"Evidence"** section.

* Click on the **"Attach Evidence"** button. * A list of available tasks will appear.

* Select the tasks you want to attach as evidence. * Click the "Save" button to confirm and attach the evidence to the selected tasks. 1. **To Remove evidence:** * Click on the "**Remove Evidence**" button. * A list of tasks with attached evidence will appear. * Select the tasks you want to remove as evidence. * Click the **"Remove"** button to confirm and detach the evidence from the selected tasks.

# Vendor Management ## Overview The **Vendor Management** feature in **ComplianceBot** facilitates the effective collaboration with **third-party vendors** through a structured form-based process. Documents in this context are considered as forms, which are used for various purposes such as collecting information, compliance checks, or contract details. **Vendor Management** involves creating and managing form requests that vendors or internal team members can collaborate on by filling out and editing these forms. This process ensures that all necessary information is gathered and reviewed systematically. The video below covers the ***Vendor Management*** feature in ComplianceBot. {% embed url="" %} # Accessing vendor management module To navigate to the '**Vendor Management**' section in ComplianceBot dashboard , follow these steps: 1\. From the main menu, select '**Vendor Management'****.** 2\. This section is dedicated to facilitating effective collaboration with third-party vendors through a structured form-based process.

# Vendor Management Workflow Facilitate effective collaboration with third-party vendors through a structured form-based process to gather and review necessary information systematically.

# Create Form Template **Creating a Form Template** To define the structure and required fields for the information needed from vendors. Navigate to the **Policy Management** section in the **ComplianceBot dashboard**. Click on **Create New Template.**

Fill in the necessary details: * **Template Title** * **Description** * **Template option** * **Version** Select a **recurrent schedule** if needed. This will determine how often the document needs to be reviewed. Lastly, click on the **Create** button # Create Form Request **Creating a Form Request** Navigate to **Vendor Management and** Click **Create Form Request** at the top left.

Enter the **Form Title**, **Purpose**, and **Welcome Message**. Choose the **Form Template** and add the necessary **Vendor Details**.

Click **Save to create form**

# Manage Responders **To Add Responders**: * Click **Manage Responders** under Actions. * Select the responders for the form.

* Add the due date for their responses. * Click **Send Invite**.

# Edit Form Template **To edit the form template** The responders can start editing the template by clicking **Edit Form Template**.

After completing the editing, they can click **Complete Edit** to finalize their changes. **To Reassign Form** * The form author can reassign the form to other responders or the same responder by clicking **"Reassign Form"** under Actions.

# Manage Approver **To Add Approvers** * Click **"Manage Approvers"** under Actions.

* Select the approvers you want to add to the form. * Set a due date for their approval. * Click **"Send Invite"** to notify them.

**To View Approver:** * To view the approvers of a form, click **"View Approvers"** under Actions. **To Reassign Form** * Approvers can either reassign the form or approve it. **To Approve Form** * After reviewing the document, the approver can click "Approve Documents" under Actions. # Approve Form Template **To Approve form** Once the approver has reviewed the document, they can finalize the process by following these steps: Click on the "**Approve Form"** option within the **Actions** menu.

A confirmation dialog will appear to ensure that the approver intends to approve the form.

Once the form is approved, it is moved to the Approved section in Vendor Management. # Settings The **Settings** feature in ComplianceBot provides a centralized hub for managing and customizing the platform to align with organizational policies and workflows. This feature allows administrators and authorized users to configure various aspects of the ComplianceBot environment, ensuring it operates efficiently and meets compliance requirements. The **Settings** section acts as the central hub for tailoring ComplianceBot to suit your organization’s needs, allowing administrators to efficiently **manage users, policies, security measures, integrations, and more.** # Accessing Settings To navigate to the **Settings** section in the ComplianceBot dashboard, follow these steps: 1. Locate the **Main Menu** on the left-hand side or top navigation bar of the ComplianceBot dashboard. 2. Click on the **Settings** option from the menu to open the Settings page.

# Profile Setting The **Profile Settings** section enables users to securely manage their personal and account details. It includes: 1. **Personal Information** * First Name, Last Name, Phone Number, Email Address 2. **Change Password** * **Old Password**: Input field to enter the current password. * **New Password**: Input field to set the new password (must comply with the organization’s password policy). * **Confirm Password**: Input field to confirm the new password. 3. **Digital Signature** * **Current Signature**: Displays the existing signature for reference. * **Update Signature Options**: * **Upload Signature**: Upload a scanned signature file (PNG, JPG, PDF). * **Draw Signature**: Create a signature using a drawing tool. * **Generate Signature**: Automatically generate a digital signature with predefined styles. 4. **Actions** * **Save Changes**: Save all updates.

# Administrators #### **Admin Management Section** **View Current Admins**: Here, you can view a list of all current admins, including their name, Phone No and Email etc.

**Add New Admin:** * Click the **Add New Admin** button. * Enter the required details: name, email, and access permissions. * Select the **role and responsibilities** for the new admin * Click **Submit** to finalize

**Remove Admin**: * In the Admin Management section, locate the admin you wish to remove. * Click on the **Remove Admin** option next to their details. # People #### People Directory Complete Roster of Active and Inactive Individuals: **Add people-** * Click the **Add New people** button. * Enter the required details: name, email, and access permissions. * Select the **role and responsibilities** for the new admin * Click **Submit** to finalize **Remove and Edit people-** You can choose to **remove** or **edit** the person from the list

# Committees In ComplianceBot, **committees** are teams responsible for managing specific compliance-related tasks and projects. They ensure tasks are organized, appropriate members are assigned, and compliance standards are met within the organization. #### **Add Committees** * **Name**: Choose a name for the committee that reflects its purpose or area of focus (e.g., **Data Privacy Committee**, **Compliance Audit Team**). * **Goal**: Define the committee's objectives like overseeing **GDPR Compliance** or conducting **Quarterly Security Audits**. **Add and Remove Participant** * After creating the committee, you can assign or remove participants to it. * **Participants:** These can be individuals from different teams within the organization who are responsible for completing tasks and ensuring compliance requirements are met.

#### # Incident Category We can create **Incident Categories** to better organize and classify incidents based on their nature. Each incident category would typically consist of the following fields: #### Create Incident Category: 1. **Name**:-The title or label for the incident category (e.g., "Data Breach", "System Outage", "Security Vulnerability"). 2. **Description**:-A detailed explanation of what types of incidents fall under this category and how they should be handled (e.g., "Data Breach: An incident where sensitive or confidential information is accessed or exposed by unauthorized individuals.").

# Training Group **Training Groups** in ComplianceBot help you organize employees or users into specific groups for targeted compliance or security training. This structure ensures the right training modules are assigned to the right audience, improving training effectiveness and compliance adherence

#### Create Training Group 1. **Name**:- The title or label for the training group (e.g., "New Hires", "IT Team", "Managers"). 2. **Description:** A detailed explanation of the purpose of the training group and the types of individuals it includes (e.g., "New Hires: This group is for onboarding employees, focusing on basic compliance and security training required for all new team members."). # Document Groups A **Document Group** is a categorized collection of related documents that are grouped together based on their purpose, type, or usage within an organization. It helps in organizing, managing, and controlling access to documents for streamlined workflows and better compliance management. Create Document Group- **Name:**\ The title or label for the document group (e.g., "Policy Documents", "Client Agreements", "Employee Records"). **Description:**\ A detailed explanation of the purpose of the document group and the types of documents it includes (e.g., "Policy Documents: This group contains all company policies, including Code of Conduct, IT Security Policies, and Data Privacy Guidelines.").