Documentation menu
Overview
Getting started
Platform
Partners
Security
Docs / Platform
Compliance and reporting
kymeer ships 36 report packs and 20 compliance dashboards, including daily log review with sign-off and regulator deadline clocks.
kymeer ships 36 report packs (20 operational, 16 compliance) and 20 compliance dashboards, including daily log review with sign-off and regulator deadline clocks. It supports your compliance work; it does not certify you.
Which report packs are included?
| Set | Packs |
|---|---|
| Operational | 20 |
| GDPR | 3 |
| HIPAA | 3 |
| ISO 27001 | 3 |
| NIST | 3 |
| PCI DSS | 4 |
Reports run on demand or on an hourly, daily, weekly or monthly schedule, and output CSV, HTML or PDF. There are no DPDP, RBI, SEBI or CERT-In report packs.
Which dashboards are included?
Twelve general dashboards:
- compliance posture
- log collection and retention health
- daily log review
- user access and authentication
- privileged activity
- incidents against regulator deadlines
- vulnerability and patch compliance
- change management audit
- executive risk summary
- audit-ready evidence export
- multi-framework control mapping (PCI DSS, ISO 27001 and SOC 2)
- scheduled report delivery
The other eight cover OT. See OT visibility.
How does daily log review work?
The dashboard shows, per day, how much was ingested and whether an analyst signed off, and flags missed days. Analyst roles can sign off; the Auditor role cannot. A monthly PDF or CSV roll-up is available, and it is refused rather than produced if the sign-off record for that month would be truncated.
Which regulator clocks are tracked?
| Clock | Window |
|---|---|
| CERT-In | 6 hours |
| RBI | 6 hours |
| NIS2 | 24 hours |
| GDPR | 72 hours |
Each clock runs from detection.
How are data-rights requests handled?
- Export. An access request for a named data principal and date range runs as an export job.
- Erasure. A request must name a specific principal and date range, and shows how much data it would remove. It then needs a one-time code sent to the data protection officer, approval by a different user, and a 48-hour cooling-off period before kymeer crypto-shreds the data key for that scope.
A legal hold blocks erasure at request, at approval and at execution, and every step is audited.
Does kymeer certify me?
No. kymeer content supports your compliance work; it does not certify you or your organisation.