Approve and share reports
Approve an audit report, export it as PDF, DOCX, Markdown, or JSON, and share a read-only review link with people outside Veriom.
This page is for the Analyst who signs off on an audit and shares the result. Each audit produces a report. You approve it, then export it or share it with a review link.
Approve a report
- Open Compliance and select the Reports tab.
- Click View report on the report you want.
- Read it, then click Approve and lock and confirm your identity.
You need the Analyst role or above. The report shows Approved and frozen. An approved report does not change. A later audit creates a new report instead.
Export a report
Exports are available after you approve the report. Choose one of these formats:
| Format | Use it for |
|---|---|
| Sharing a fixed document | |
| DOCX | Editing in Word |
| Markdown | Pasting into a wiki or a pull request |
| JSON | Feeding another tool |
A Developer or above can export.
Share a review link
A review link shows a read-only snapshot of one approved report to someone without a Veriom account.
- Open Compliance and select the Review links tab.
- Under Create a review link, choose an approved report.
- Choose what to include, for example Masked evidence excerpts or Source locations and audit paths. Add any Text to redact.
- Set Expires in days and Maximum opens.
- Click Preview shared content to check what the reader will see.
- Create the link and click Copy link.
| Setting | Allowed values |
|---|---|
| Expiry | 5 minutes to 90 days |
| Maximum opens | Up to 10,000. The default is 100 |
| Active links per report | Up to 100 |
| Reviewer comments | Off unless you turn them on |
Link activity shows each time the link was opened. You can revoke a link at any time.
You need the Analyst role or above.
Answer security questionnaires and track compliance
The other Compliance tabs reuse approved audit evidence:
- Questionnaires: answer a customer's security questionnaire from your workspace's evidence.
- Programs: map audit evidence to the controls of a compliance framework. Programs are part of the Free Trial, Growth, and Enterprise plans.
Veriom maps evidence to controls. It does not certify that you comply with a framework.
If something goes wrong
| Problem | Fix |
|---|---|
| Veriom says to approve the report before creating a downloadable export | Approve the report first |
| Taxonomy release required | Veriom has not published the finding taxonomy this report needs yet. Try again later or contact Veriom support |
| Access limit reached on a review link | Create a new link with a higher Maximum opens |
Was this guide useful?
Your response stays in this browser unless you open a GitHub issue.Autopilot and autonomy
What Veriom sets up for you when you connect a repository, what it can do on its own once an Admin allows it, and what always waits for a person.
Members and roles
Invite people to a Veriom workspace, choose their role, and change or remove access. Includes what each role can do.