Firewall Rules
Add an exact IP address or CIDR range such as 203.0.113.14 or 203.0.113.0/24. Allow rules take priority over block rules.
Service Providers / Vendors
Each service provider is one vendor record. Create, edit, rate, retire, send due diligence invitations, and associate it with clients from this workflow.
Software Updates
Upload a Compliance Tracker ZIP package, apply it to overwrite the runtime files in the install folder, then restart the application listeners to load the new Python code.
Preparing update...
Waiting for update status.
Regulatory Updates
Control and Best-Practice Content Updates
Paste the official replacement wording, compare it to the live catalog with AI, then explicitly accept it before Compliance Tracker changes a control or best-practice deployment step.
Framework Catalog Coverage
This audit identifies catalogs that are ready for control- and objective-level assessments and flags high-level starter records that need an approved source import before formal use.
Import Framework Controls And Objectives
Framework Crosswalks
Relate a detailed control in one framework to the corresponding control in another. Use the relationship and rationale to explain how evidence supports more than one standard.
AI Settings
Built-in Local AI uses the bundled local runtime and does not require an API key.
Checking AI
The AI runtime status will appear here.
AI Skills and Training Documents
Scheduled Report Email
SSL Admin Tools
Let's Encrypt / ACME
Public DNS must point to this server, and inbound port 80 must reach its HTTP listener. Wildcard certificates are not supported. Test staging first; staging certificates are not activated.
Manual Certificate / CSR
For ZeroSSL and other public CAs, use a public fully qualified domain name only. Do not use localhost, an IP address, or a URL with https://.
Backup and Export
Database Location
The Windows service keeps program files separate from mutable data. Move the active database only when you need to relocate the data folder.
Client Administration
Admins can update client details, set a client inactive, export a client package, or remove the client entirely.
Assessment Administration
Archive assessments to remove them from active workspaces, restore them later, or permanently delete them when needed.
CMMC Data Hash
System Diagnostics
Checks the HTTP and HTTPS listeners and collects service, Python, email, AI, and update logs for troubleshooting.
Runtime Reliability
The Windows service already restarts an HTTP or HTTPS listener after three failed health checks. Optionally schedule a graceful listener restart for a maintenance interval.
Windows Service Watchdog
This independent Windows task checks both local listeners. After repeated failures, it records a diagnostic snapshot and restarts the full Compliance Tracker Windows service.
