Compliance Reporting

Anima provides built-in reporting tools for compliance workflows including SOC 2 audit preparation, DSAR (Data Subject Access Request) fulfillment, and executive compliance dashboards.

Report Templates

Generate pre-built reports for common compliance needs:

Tab Title
Tab Title
Tab Title

import { Anima } from "@anima-labs/sdk";

const anima = new Anima({ apiKey: "ak_..." });

// Generate a SOC 2 audit readiness report
const report = await useanima.shpliance.reports.generate({
  template: "soc2-readiness",
  period: {
    startDate: "2026-01-01",
    endDate: "2026-03-31",
  },
  format: "pdf",  // "pdf" | "html" | "json"
  includeEvidence: true,
});

console.log(`Report: ${report.id}`);
console.log(`Download: ${report.downloadUrl}`);

from anima import Anima

anima = Anima(api_key="ak_...")

report = useanima.shpliance.reports.generate(
    template="soc2-readiness",
    period={
        "start_date": "2026-01-01",
        "end_date": "2026-03-31",
    },
    format="pdf",
    include_evidence=True,
)

print(f"Report: {report.id}")
print(f"Download: {report.download_url}")

import "github.com/anima-labs-ai/go"

client := anima.NewClient("ak_...")

report, err := client.Compliance.Reports.Generate(ctx, &anima.GenerateReportParams{
    Template: "soc2-readiness",
    Period: anima.ReportPeriod{
        StartDate: "2026-01-01",
        EndDate:   "2026-03-31",
    },
    Format:          "pdf",
    IncludeEvidence: true,
})

Available Templates

Template	Description
`soc2-readiness`	SOC 2 Type II audit readiness with control status and evidence
`agent-activity`	Summary of agent actions, emails sent, transactions processed
`security-posture`	Anomaly detection results, quarantine events, key rotations
`access-review`	API key usage, permission changes, pod access
`spending-summary`	Wallet spending by agent, pod, and time period
`data-inventory`	Inventory of data stored across vault, email, and attachments

DSAR (Data Subject Access Requests)

Handle GDPR and CCPA data subject access requests:

Tab Title
Tab Title

// Initiate a DSAR
const dsar = await useanima.shpliance.dsar.create({
  subjectEmail: "user@example.com",
  requestType: "access",  // "access" | "deletion" | "portability"
  notes: "GDPR Article 15 request received via support ticket #4521",
});

console.log(`DSAR ID: ${dsar.id}`);
console.log(`Status: ${dsar.status}`);  // "processing" | "ready" | "completed"
console.log(`Estimated completion: ${dsar.estimatedCompletionAt}`);

// Check DSAR status and download results
const result = await useanima.shpliance.dsar.get(dsar.id);
if (result.status === "ready") {
  console.log(`Download: ${result.downloadUrl}`);
  console.log(`Records found: ${result.recordCount}`);
  console.log(`Data categories: ${result.categories.join(", ")}`);
}

dsar = useanima.shpliance.dsar.create(
    subject_email="user@example.com",
    request_type="access",
    notes="GDPR Article 15 request received via support ticket #4521",
)

print(f"DSAR ID: {dsar.id}")
print(f"Status: {dsar.status}")

# Check status and download
result = useanima.shpliance.dsar.get(dsar.id)
if result.status == "ready":
    print(f"Download: {result.download_url}")
    print(f"Records found: {result.record_count}")

DSAR Data Categories

When a DSAR is processed, data is collected across these categories:

Category	Data Included
`email_messages`	Emails sent to or from the subject
`a2a_interactions`	A2A tasks involving the subject’s agents
`audit_events`	Audit log entries referencing the subject
`agent_metadata`	Agent profiles associated with the subject

Compliance Dashboard

Get a real-time view of your compliance posture:

const dashboard = await useanima.shpliance.dashboard.get();

console.log("--- Compliance Dashboard ---");
console.log(`SOC 2 Controls: ${dashboard.soc2.passing}/${dashboard.soc2.total} passing`);
console.log(`Readiness Score: ${dashboard.soc2.readinessScore}%`);
console.log(`Open DSARs: ${dashboard.dsar.openCount}`);
console.log(`Avg DSAR Resolution: ${dashboard.dsar.avgResolutionDays} days`);
console.log(`Anomalies (30d): ${dashboard.anomalies.last30Days}`);
console.log(`Quarantined Agents: ${dashboard.anomalies.quarantinedCount}`);
console.log(`Last Audit Report: ${dashboard.lastReport.generatedAt}`);

Scheduled Reports

Automate report generation on a schedule:

await useanima.shpliance.reports.schedule({
  template: "security-posture",
  frequency: "weekly",          // "daily" | "weekly" | "monthly" | "quarterly"
  format: "pdf",
  recipients: ["compliance@acme.com", "ciso@acme.com"],
  dayOfWeek: "monday",          // for weekly reports
});

API Reference

Endpoint	Method	Description
`https://api.useanima.sh/api/compliance/reports`	POST	Generate a report
`https://api.useanima.sh/api/compliance/reports`	GET	List generated reports
`https://api.useanima.sh/api/compliance/reports/:id`	GET	Get report status and download URL
`https://api.useanima.sh/api/compliance/reports/schedule`	POST	Schedule recurring reports
`https://api.useanima.sh/api/compliance/reports/schedule`	GET	List scheduled reports
`https://api.useanima.sh/api/compliance/dsar`	POST	Create a DSAR request
`https://api.useanima.sh/api/compliance/dsar`	GET	List DSARs
`https://api.useanima.sh/api/compliance/dsar/:id`	GET	Get DSAR status and results
`https://api.useanima.sh/api/compliance/dashboard`	GET	Get compliance dashboard

Configuration

Variable	Default	Description
`ANIMA_COMPLIANCE_DSAR_SLA_DAYS`	`30`	DSAR completion SLA in days
`ANIMA_COMPLIANCE_REPORT_RETENTION`	`730`	Report retention in days (2 years)
`ANIMA_COMPLIANCE_REPORT_STORAGE`	`s3`	Storage backend for generated reports

Next Steps

SOC 2 Controls — Detailed control mappings
Audit Log — Underlying data for reports
Anomaly Detection — Security posture data

​Compliance Reporting

​Report Templates

​Available Templates

​DSAR (Data Subject Access Requests)

​DSAR Data Categories

​Compliance Dashboard

​Scheduled Reports

​API Reference

​Configuration

​Next Steps