generate-compliance-audit-document

name	generate-compliance-audit-document
title	Generate a Compliance Audit Document
description	Generate a formatted PDF compliance audit document with findings, risk ratings, remediation recommendations, and sign-off sections.
author	iterationlayer
author_url	https://github.com/iterationlayer/skills/tree/main/skills/generate-compliance-audit-document
license	MIT
version	0.1.0
execution_mode	open
jurisdiction	general
practice	data-protection
language	en

Generate a Compliance Audit Document

Compliance agencies and internal audit teams use this recipe to generate standardized audit documents — with structured findings tables, risk classifications, remediation timelines, and sign-off sections ready for stakeholder review.

APIs Used

Document Generation (2 credits/request)

Prerequisites

You need an Iteration Layer API key. Get one at platform.iterationlayer.com — free trial credits included, no credit card required.

For full integration guidance (SDKs, auth, MCP, error handling), see the Iteration Layer Integration Guide.

Implementation

curl -X POST https://api.iterationlayer.com/document-generation/v1/generate \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "format": "pdf",
    "document": {
      "metadata": {
        "title": "GDPR Compliance Audit Report — DataFlow Analytics",
        "author": "Sentinel Compliance Partners"
      },
      "page": {
        "size": {
          "preset": "A4"
        },
        "margins": {
          "top_in_pt": 54,
          "right_in_pt": 54,
          "bottom_in_pt": 54,
          "left_in_pt": 54
        }
      },
      "content": [
        {
          "type": "headline",
          "level": "h1",
          "text": "GDPR Compliance Audit Report"
        },
        {
          "type": "paragraph",
          "runs": [
            {
              "text": "Client: ",
              "font_weight": "bold"
            },
            {
              "text": "DataFlow Analytics GmbH\n"
            },
            {
              "text": "Audit Period: ",
              "font_weight": "bold"
            },
            {
              "text": "January 1 – March 31, 2026\n"
            },
            {
              "text": "Prepared by: ",
              "font_weight": "bold"
            },
            {
              "text": "Sentinel Compliance Partners\n"
            },
            {
              "text": "Report Date: ",
              "font_weight": "bold"
            },
            {
              "text": "April 10, 2026"
            }
          ]
        },
        {
          "type": "separator"
        },
        {
          "type": "headline",
          "level": "h2",
          "text": "Executive Summary"
        },
        {
          "type": "paragraph",
          "runs": [
            {
              "text": "This audit assessed DataFlow Analytics' compliance with the General Data Protection Regulation (GDPR) across data processing activities, consent management, data subject rights handling, and technical security measures. The overall compliance posture is rated as Satisfactory with three findings requiring remediation."
            }
          ]
        },
        {
          "separatorheadlinelevelh2textFindingstableheadercellstext#textFindingtextRisktextRemediationtextDue Daterowscellstext1textData Processing Agreements missing  2 sub-processorstextHightextExecute DPAs with identified sub-processorstext2026-05-15cellstext2textCookie consent banner does not offer granular opt-outtextMediumtextImplement category-level consent controlstext2026-06-01cellstext3textData retention schedule not enforced  analytics logstextMediumtextConfigure automated  deletion after 90 daystext2026-05-30separatorheadlinelevelh2textOverall AssessmenttableheadercellstextAreatextRatingrowscellstextLawful Basis & ConsenttextNeeds ImprovementcellstextData Subject RightstextCompliantcellstextData Processing AgreementstextNon-CompliantcellstextTechnical Security MeasurestextCompliantcellstextData RetentiontextNeeds ImprovementcellstextBreach Notification ProcedurestextCompliantseparatorheadlinelevelh2textSign-OffparagraphrunstextLead Auditor: font_weightboldtextDr. Katrin Hoffmann, CIPP/E\ntextDate: font_weightboldtextApril 10, 2026\n\ntextClient Acknowledgment: font_weightboldtext________________________________\ntextDate: font_weightboldtext________________________________