What applies. What covers it. Who owns it.

Six columns. The whole position.

Each row is a requirement, cited to its framework and article. Beside it: what covers it, the evidence with its freshest date, the owner — or a red UNOWNED chip that is impossible to miss — the status, and when it was last reviewed. Four statuses, decided by rules: COVERED means a control or sealed document, current evidence, a named owner and an in-date review. PARTIAL means some of that. MISSING means nothing is mapped. STALE means something changed — evidence expired, the framework moved, the system's profile shifted — and the row says which.

The missing document, written where the gap is.

Where a row's gap is a missing document — a risk assessment, a Statement of Applicability entry, a DPIA — the Generate button sits on that row. Hael writes the document from the system's real profile, it goes through review and sign-off, and the row recomputes. Only sealed documents count as coverage: a draft proves nothing to a regulator, and Hael does not pretend otherwise.

The drawer an auditor would ask for.

Open any requirement and the full chain is there: the obligation's text and citation, the controls mapped to it, each evidence item with its date and tamper-proof fingerprint, and every sealed document with its approval line — a name, a title, a date. That is the end-to-end walkthrough reviewers ask for, on screen, without preparation.

Every claim traceable to the record it came from.