candidates
Data license: Not yet licensed — internal review only · Data source: Ahmed ElBatanony, Innopolis University
79 rows where app_id = "F1-046", in_final_set = "1.0" and run = "a"
This data as json, CSV (advanced)
Suggested facets: source_url, source_file
| candidate_id ▼ | app_id | run | statement | excerpt | source_url | source_file | script_check | verifier_verdict | verifier_reason | verifier_correction | adjudicator | adjudicator_reason | in_final_set |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| F1-046-A001 | Probo F1-046 | a | The system lets a user maintain a risk register | Risk register, inherent/residual scoring, treatment strategies (mitigate, accept, avoid, transfer), threat-based risk assessments | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A002 | Probo F1-046 | a | The system lets a user maintain a control library with maturity levels | Control library with maturity levels, custom framework import/export, Statement of Applicability (SoA) | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A003 | Probo F1-046 | a | The system lets a user import and export custom frameworks | custom framework import/export | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A004 | Probo F1-046 | a | The system lets a user keep a vendor inventory and track data processing agreements | Vendor inventory, automated website risk assessment, DPA/BAA tracking, subprocessor discovery | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | corrected | Compound statement; vendor inventory is the single capability here, contract tracking is covered by A020. | The system lets a user keep an inventory of vendors. | corrected | Compound statement; agreement tracking is already covered by the surviving third-party contract-tracking statement. | 1.0 |
| F1-046-A005 | Probo F1-046 | a | The system lets a user record processing activities and maintain a data inventory | processing activity records, data inventory | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | corrected | Compound statement; processing activities are covered separately by A026. | The system lets a user maintain a data inventory. | corrected | Compound statement; processing activity records are covered by a separate surviving statement. | 1.0 |
| F1-046-A006 | Probo F1-046 | a | The system lets a user collect evidence as files and URLs and track implementation state | Evidence collection (files and URLs), implementation state tracking, task assignment | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | corrected | Compound statement; implementation-state tracking is not a separate evidenced capability. | The system lets a user collect evidence as files and URLs. | corrected | Compound statement; splitting keeps one capability per statement and the bare table cell gives no further detail on implementation-state tracking. | 1.0 |
| F1-046-A007 | Probo F1-046 | a | The system lets a user require quorum approval and electronic signatures on versioned documents | Versioned documents, approval quorums, electronic signatures, PDF export, bulk operations | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A008 | Probo F1-046 | a | The system lets a user publish a public compliance portal with custom domain support | Public compliance portal, NDA management, certification publishing, custom domain support | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A010 | Probo F1-046 | a | The system lets a user automate compliance work through a command-line client | A fully-featured command-line client for scripting, automation, and CI/CD integration. | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A011 | Probo F1-046 | a | The system lets a user connect an AI agent to read and write compliance data | Any MCP-compatible LLM agent (Claude, Cursor, Continue, and others) can connect directly and interact with your compliance data. | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A012 | Probo F1-046 | a | The system lets a user automate compliance tasks in an external no-code workflow tool | brings Probo into n8n workflows for no-code automation of compliance tasks over the GraphQL API | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A013 | Probo F1-046 | a | The system lets an auditor scope audits, map controls, track findings, and generate reports | Audit scoping, control mapping, finding tracking, report generation | https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md | 01.txt | passed | corrected | Compound statement; finding tracking is covered by A024, report generation is listed as missed. | The system lets an auditor scope audits and map controls to them. | corrected | Compound statement; finding tracking is covered separately and report generation is accepted as a missed item. | 1.0 |
| F1-046-A014 | Probo F1-046 | a | The system lets a user receive task and comment lifecycle events through webhooks | Use GraphQL, the `prb` CLI, MCP, n8n, and webhooks instead of limiting work to the console. | https://www.probo.com/docs/product/getting-started/product-overview.md | 03.txt | passed | corrected | Describes an automation, not a user action. | The system automatically sends task and comment lifecycle events through webhooks when tasks or comments change. | corrected | The source (09.txt: 'Webhooks Receive task and comment lifecycle events') supports it, and event delivery is an automation. | 1.0 |
| F1-046-A015 | Probo F1-046 | a | The system lets a user publish certifications, commitments, references, and protected files through a compliance portal | Publish certifications, commitments, references, and protected files through the Compliance Portal. | https://www.probo.com/docs/product/getting-started/product-overview.md | 03.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A016 | Probo F1-046 | a | The system lets a user collect endpoint posture through a device agent | collect endpoint posture through Device Agent | https://www.probo.com/docs/product/getting-started/product-overview.md | 03.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A017 | Probo F1-046 | a | The system lets a user invite members to an organization | Users are invited as members of an organization. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A018 | Probo F1-046 | a | The system lets a user link one internal control to multiple controls across different frameworks | A single internal control can satisfy multiple controls across different frameworks. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A019 | Probo F1-046 | a | The system lets a user link risks to internal controls, obligations, vendor assessments, and risk-assessment scenarios | Risks can be linked to internal controls, obligations, vendor assessments, and structured risk-assessment scenarios. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A020 | Probo F1-046 | a | The system lets a user track contracts, conduct risk assessments, and monitor compliance status of third parties | Third-party management includes tracking contracts, conducting risk assessments, vetting, and monitoring compliance status. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A021 | Probo F1-046 | a | The system lets a user inventory assets and link them to the controls and risks that apply | Assets are inventoried and linked to the controls and risks that apply to them. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A022 | Probo F1-046 | a | The system automatically repeats a task when its deadline passes | A task has a state, a priority, an optional deadline, and can repeat when that deadline passes. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A023 | Probo F1-046 | a | The system lets a user keep tasks in sync with an external issue tracker | Tasks can stay in sync with Linear. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A024 | Probo F1-046 | a | The system lets a user record audit findings as major nonconformity, minor nonconformity, observation, or exception and link them to audits | Finding kinds include major nonconformity, minor nonconformity, observation, and exception. Findings can be linked to one or more audits. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A025 | Probo F1-046 | a | The system lets a user track legal and regulatory obligations separately from framework controls | Obligations are tracked separately from framework controls to capture jurisdiction-specific requirements. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A026 | Probo F1-046 | a | The system lets a user record data processing activities with the data processed, legal basis, retention periods, and data subjects | Each record documents what data is processed, the legal basis, retention periods, and data subjects involved. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A027 | Probo F1-046 | a | The system lets a user run Data Protection Impact Assessments | DPIAs evaluate the necessity and proportionality of processing, and identify measures to mitigate risks to data subjects. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A028 | Probo F1-046 | a | The system lets a user run Transfer Impact Assessments for international data transfers | TIAs evaluate whether the destination country provides adequate data protection and what supplementary measures are needed. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A029 | Probo F1-046 | a | The system lets a user record which controls apply to the organization and why in a Statement of Applicability | A reviewed record of which controls apply to an organization and why. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A030 | Probo F1-046 | a | The system lets a user run access review campaigns from Probo memberships, CSV data, or connected providers | Campaigns that bring access entries from Probo memberships, CSV data, or connected providers into one review. | https://www.probo.com/docs/product/getting-started/core-concepts.md | 04.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A032 | Probo F1-046 | a | The system lets a user assign a task with an optional due date | A task assigns a concrete piece of work, optionally with a due date. | https://www.probo.com/docs/product/compliance-program | 05.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A033 | Probo F1-046 | a | The system lets a user publish a list or statement as a stable representation for review | Publishing a list or statement creates a stable representation for review. | https://www.probo.com/docs/product/compliance-program | 05.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A034 | Probo F1-046 | a | The system lets a user investigate important changes using an audit log | use the audit log to investigate important changes | https://www.probo.com/docs/product/compliance-program | 05.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A035 | Probo F1-046 | a | The system lets a user model threat-based risk assessments with scopes, nodes, boundaries, processes, threats, and scenarios | A risk assessment can contain scopes, nodes, boundaries, processes, threats, and scenarios. | https://www.probo.com/docs/product/risk-management | 06.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A036 | Probo F1-046 | a | The system lets a user export scope diagrams as Mermaid | Scope diagrams can be exported as Mermaid for use in technical review. | https://www.probo.com/docs/product/risk-management | 06.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A037 | Probo F1-046 | a | The system lets a user track rights requests such as access or erasure through their lifecycle | Rights requests track requests such as access or erasure through their operational lifecycle. | https://www.probo.com/docs/product/privacy-management | 07.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A038 | Probo F1-046 | a | The system lets a visitor submit a rights request from the public site through a compliance portal | To let visitors submit a request from your public site, see Rights requests in the Compliance Portal. | https://www.probo.com/docs/product/privacy-management | 07.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A039 | Probo F1-046 | a | The system lets a user authenticate with SAML single sign-on through an identity provider | use SAML single sign-on (SSO) to authenticate them through your identity provider | https://www.probo.com/docs/product/identity-and-access | 08.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A040 | Probo F1-046 | a | The system lets an administrator create, update, and deactivate user access from an identity provider with SCIM | use SCIM to create, update, and deactivate their access | https://www.probo.com/docs/product/identity-and-access | 08.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A041 | Probo F1-046 | a | The system lets an administrator invite and role-manage members in the organization | Invite and role-manage members in the organization | https://www.probo.com/docs/product/identity-and-access | 08.txt | passed | corrected | Invitation is a duplicate of A017; only the role-management part is new. | The system lets an administrator assign roles to organization members. | corrected | Inviting members is already covered by A017; only role management is new. | 1.0 |
| F1-046-A042 | Probo F1-046 | a | The system lets an administrator map membership roles from an identity provider with a SAML role attribute | or map them from your identity provider with the SAML Role Attribute | https://www.probo.com/docs/product/identity-and-access | 08.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A043 | Probo F1-046 | a | The system lets an administrator verify the email domain used by organization members | Verify the email domain used by organization members. | https://www.probo.com/docs/product/identity-and-access | 08.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A044 | Probo F1-046 | a | The system lets an owner or admin create tasks | Owners and admins can create tasks. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A045 | Probo F1-046 | a | The system lets a viewer read tasks, comments, and activity | Viewers can read tasks, comments, and activity. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A046 | Probo F1-046 | a | The system lets a user search tasks by name and filter them by state or assignee | The list can be searched by name and filtered by state or assignee. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A047 | Probo F1-046 | a | The system lets a user reorder tasks by dragging, which updates the priority when dropped next to tasks of another priority | Drag a task to change its order. Dropping it next to tasks of another priority updates its priority too. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A048 | Probo F1-046 | a | The system lets a user set a time estimate on a task as a duration | Expected effort, as an ISO-8601 duration such as PT2H or P1D. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A049 | Probo F1-046 | a | The system lets a user set a task state of backlog, to do, in progress, done, canceled, or duplicate | Defaults to To do. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A050 | Probo F1-046 | a | The system lets a user set a task priority of urgent, high, medium, or low | Urgent, High, Medium, or Low. Defaults to Medium. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A052 | Probo F1-046 | a | The system lets a user comment on a task | The task page has a comment thread and an activity log. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 | |||
| F1-046-A053 | Probo F1-046 | a | The system lets an author edit or delete their own task comment | The author can edit or delete their own comment. | https://www.probo.com/docs/product/tasks/overview | 09.txt | passed | confirmed | (not sent: confirmed) | 1.0 |
Advanced export
JSON shape: default, array, newline-delimited, object
CREATE TABLE [candidates] ([candidate_id] TEXT PRIMARY KEY, [app_id] TEXT, [run] TEXT, [statement] TEXT, [excerpt] TEXT, [source_url] TEXT, [source_file] TEXT, [script_check] TEXT, [verifier_verdict] TEXT, [verifier_reason] TEXT, [verifier_correction] TEXT, [adjudicator] TEXT, [adjudicator_reason] TEXT, [in_final_set] REAL, FOREIGN KEY ([app_id]) REFERENCES apps(app_id)); CREATE INDEX [idx_candidates_app_id] ON [candidates]([app_id]); CREATE INDEX [idx_candidates_run] ON [candidates]([run]); CREATE INDEX [idx_candidates_verifier_verdict] ON [candidates]([verifier_verdict]); CREATE INDEX [idx_candidates_adjudicator] ON [candidates]([adjudicator]);