Reports and the evidence packet
The Reports page builds six exam reports for any date range you choose. You reach it from Exam readiness > Reports. Admins, managers, and auditors can generate and download reports.
The six reports
Section titled “The six reports”Each report comes as a PDF and a CSV.
| Report | What it shows |
|---|---|
| Channel coverage statement | Every member on every required channel (outside auditors are not included), with coverage gaps, last capture, and any “not used” or “not expected” statements from the coverage baseline. |
| Evidence of review | Supervisory totals and one row per review decision, including decisions that were taken back. |
| Personal content exclusion | Classification events and team defaults. It shows counts of events, never message content. |
| Custodian lifecycle | When members joined, changed role, connected channels, and left, and what happened to their channels. |
| Configuration history | Retention rules, legal holds, settings changes, and the regulatory profile for the period. |
| Quarterly compliance report | The quarterly summary for regulators, including drills completed in the period. |
Generate reports
Section titled “Generate reports”- Choose a period: Last quarter, This quarter, Last 12 months, or Custom. Last 12 months means the 12 full calendar months before this one. The first and last days are both included.
- Press Show period.
- Press Generate on one report, or Generate all as packet for all six.
The run appears in Run history, and the page updates itself until it finishes.
- Complete means every report is in the run.
- Partial means at least one report could not be built. The run is final and can be downloaded. Open the run to see which reports are missing, then generate those again as a new run.
Download the packet
Section titled “Download the packet”Press Download zip.
The first download asks you to confirm it is you, with your authenticator app, a backup code, or a passkey. You are not asked again for 5 minutes. Your team’s sign-in policy can turn this check off for everyone except auditors. Auditors are always asked for their own second factor.
If you have not set up a second factor, you are asked to set one up first when your team offers two-factor setup.
Check the files against the manifest
Section titled “Check the files against the manifest”Every zip includes a manifest.json with a SHA-256 fingerprint for each file. Open a run, by its time in the Requested column, to see the fingerprints. Anyone can re-hash a file from the zip and compare it to the manifest to confirm it has not changed since Comma produced it.
Good to know
Section titled “Good to know”- Report files are kept for 90 days after a run completes. The manifest and its fingerprints are kept after that.
- If a run fails or stalls, press Retry. Retry creates a new run, and the old run keeps its status. Retry is not offered on a Partial run.
- Some runs name contacts that not everyone on the team is allowed to see. Those runs can be downloaded only by the person who generated them, or by someone who can see every contact in them. Otherwise, generate your own copy.
- Each team member can download up to 60 report zips an hour.
- Reports replaces the earlier Compliance Report page. Old links to it open Reports with Last quarter chosen.
Related
Section titled “Related”- Review periods - each period links straight to its Evidence of review
- Exam drills - drill steps can use a Complete or Partial report run as evidence
- Audit & compliance reporting - the settings change log and its export