07Module · Risk & Compliance
Audit readiness,
without the manual marathon.
GDPR, DORA, vendor compliance: knooing continuously monitors the status of your applications and services. Data classification, contracts, security ratings and vendor risk in one place – every change is auditable.
What this module delivers
Four building blocks for resilient compliance.
01Compliance & risk dashboard
Status of every app, service and vendor at a glance.
A central dashboard shows compliance and risk status for every application, service and vendor. Filterable by risk category, region, capability and ownership – so where action is needed becomes visible immediately.
- Compliance and risk score per asset
- Filtering by risk category, region, capability
- Drill-down from score to concrete finding
- Aggregated view for board and audit reports

02Early warnings & status monitoring
Spot issues before they become incidents.
Expiring contracts, critical privacy status, outdated security reviews, vendor warning signals: knooing checks status continuously and flags issues early – with clear ownership and an escalation path.
- Early warnings on critical contract, privacy or security status
- Configurable thresholds per risk category
- Email notifications to owners
- Escalation paths with status tracking

03Vendor scoring
Continuously monitor vendor risk — not just once a year.
Vendors are scored continuously based on compliance status, security ratings, contract situation and market signals. Instead of an annual spreadsheet exercise you get a running vendor risk index that flows directly into procurement decisions.
- Vendor score from compliance, security and contract data
- Continuous updates instead of an annual snapshot
- Linked applications and services per vendor
- Direct input for procurement and demand decisions

04Audit log
Every change. Every email. Fully traceable.
User, email and access actions are logged in full. Who reset which password when, who unblocked which user, which email was sent – the audit log answers every question that comes up in an audit, without anyone having to dig through SQL logs.
- Full log of user, email and access actions
- Per action: actor, target, timestamp and details
- Visible in the admin panel per user ("Log" tab)
- Mandatory for every new email or access action

Make data-driven IT decisions in minutes, starting today.
Schedule a free, no-obligation demo