Every requirement, on the record.
Atlas Veris runs compliance audits as a register: one line per requirement, answered with evidence, rated, and signed by a named person. Built for consultancies auditing Moroccan organizations against Law 09-08, the Labor Code and ISO/IEC 27001.
Access is by invitation from your consultancy.
Personal data audit 2026Example client/Law 09-08 (CNDP)v3
Example24/34 answeredCompliant 22Findings 2
- Art. 12Processing declared to the CNDP before it beganReceipt D-2291/2024Compliant
- Art. 23Technical and organisational security measures in placeCAPA-014 · due 30 NovNon-compliant
- Art. 4Consent recorded for each processing purposeConsent register v3Compliant
- Art. 43Transfers abroad authorised for each recipient countryOpen
Frameworks in the libraryLaw 09-08 (CNDP)Moroccan Labor CodeISO/IEC 27001and any standard you import from Excel.
One assessment, five states, nothing lost.
The lifecycle is fixed so that a report always means the same thing: each state change is recorded with who made it and when.
- DraftAn admin assigns a published standard version to the client and opens the assessment.
- In progressAssessors answer each requirement, rate it and attach the evidence that proves it.
- SubmittedNon-compliant answers become findings, each with a CAPA and a named owner.
- ReviewedA reviewer checks the register and signs it in their own name.
- ClosedThe report is generated from the live register and archived with its version.
Built for audits that someone has to sign.
- Standards are versioned, never edited in placePublishing freezes a version. Changes go into a new draft, so every past audit still points at the exact text it was assessed against.
- Every finding has an owner and a dateCorrective actions move from open to verified with their history intact. Overdue items surface on every assessor's list.
- The machine proposes, a person attestsAutomated extraction can suggest evidence and answers. Nothing becomes part of the record until a named person validates it.