Compliance Command

Compliance Command links obligations, policies and controls with the casework of a compliance team: reports, violations and remediation. Every decision goes into the timeline with a rationale and timestamp, every piece of evidence with a checksum.

HIGHLIGHTS
• Obligations register with source, reference and review cycle, linked to the controls that cover them
• Policies with versions and an approval workflow (draft, in review, approved, published); the policy owner cannot approve their own policy
• Controls with a test cycle; control tests recorded as evidence with result, sample and exceptions, status operating or deficient
• Cases from intake through triage, investigation and findings to closure – including anonymous reports, with confidentiality and four-eyes closure
• Internal deadlines per severity for acknowledgment, initial assessment and closure, with escalation and local reminders
• Violations rated by impact × likelihood, with root cause and a documented reporting decision
• Remediation actions with priority, progress, blockers and sign-off by a second person
• Evidence as photo, file or note, encrypted on the device, with a SHA-256 checksum, valid-until date and review by another person
• Compliance index from coverage, effectiveness, test currency, on-time actions, current policies, valid evidence and deadline adherence – with the weights shown
• Reports frozen as a snapshot with SHA-256, PDF export, CSV per list with a manifest; reporter names excluded from exports by default
• 14 templates, roles Owner, Manager, Contributor and Viewer/auditor with PIN, hash-chained audit log with chain verification

LOCAL AND PRIVATE
Your data stays on your device. No account, no login, no tracking. You hand over encrypted backups and exchange packages with a one-time code yourself; imports never overwrite anything.
Privacy Policy: https://tonke.de/data-protection-en.html

PLEASE NOTE
Compliance Command documents and organizes – it is not legal advice. Severity, outcome and reporting decisions are always made by a person; deadlines are internal handling deadlines.

SUBSCRIPTION
Free: one workspace with up to three open cases; viewing, export and backup always work. The monthly subscription unlocks multiple workspaces and unlimited open cases. It renews automatically and can be canceled anytime in your Google Play subscription settings.