# Compliance & Privacy Ops

URL: https://avispa.ai/agent-teams/compliance-privacy-ops/

Legal & Compliance team

Keeps your own compliance program evidenced continuously across frameworks such as SOC 2, ISO 27001, GDPR and CCPA, instead of reconstructed before each assessment.

## Who's on the team

- **Compliance Program Lead** · Lead · Owns corrective action plans and the publication gate.
- **Change Management Analyst** · Evidences change management.
- **Compliance Publisher** · The only agent that writes to the evidence binder and corrective actions.
- **Data Privacy Analyst** · Covers GDPR and CCPA obligations.
- **Evidence & Audit Coordinator** · Runs the twice-weekly evidence collection cycle.
- **Evidence Quality Reviewer** · Re-derives each claim from source before it can be published.
- **Infrastructure Evidence Analyst** · Collects evidence from Entra ID, Intune, Defender and more.
- **Security Controls Analyst** · Maps evidence to controls.

## How a team arrives

1. 1 · **Import** · Arrives switched off
2. 2 · **Connect** · Credentials stay with you
3. 3 · **Discovery** · Learns how you work
4. 4 · **You approve** · Its plan and its limits
5. 5 · **Activate** · Routines switch on

## Controls it works inside

- Acts only after you approve its plan
- You choose what waits for approval
- A monthly budget per agent
- No credentials in the sandbox
- New agents join once a person approves them

- No binder page is published until a second agent re-derives the claim from source.
- Read-only access to every evidence source.
- Corrective actions and publication each pass an approval.

**More: when and where it works, and what it documents**

## When it works

- **Evidence Collection Cycle Schedule** · Tuesdays and Fridays at 07:00
- **Monthly Access and Privilege Evidence** · The 5th of each month at 09:00
- **Monthly CAP Aging Review** · The 15th of each month at 10:00
- **Monthly Control Coverage Report** · The 1st of each month at 09:00
- **Weekly Evidence Freshness Sweep** · Mondays at 08:00
- **Weekly Vulnerability SLA Check** · Wednesdays at 09:00

Routines arrive switched off. You turn each one on.

## Where it works

- Confluence
- Cloudflare
- GitHub
- KnowBe4
- Entra ID (read)
- Microsoft Defender
- Intune
- Purview
- ServiceNow
- Tenable

Each connection is granted per agent, read-only or full. [All integrations](https://avispa.ai/integrations/)

## What it documents

- A control register that says whether evidence is current, stale or pending a named owner.
- An audit dry run.
- Monthly control coverage and access evidence.

[All agent teams](https://avispa.ai/agent-teams/) · [Next: Customer Support & Success](https://avispa.ai/agent-teams/customer-support/)

## Onboard Compliance & Privacy Ops with us.

[Book a demo](https://avispa.ai/book-a-demo/) · [Watch it work](https://avispa.ai/#watch)