feature_id,app_id,statement,form,excerpt,source_url,source_file,source_sha256,found_by,found_by_runs,verification,pipeline_id,audited,audit_correct,audit_note
F1-046-S001,F1-046,The system lets a user maintain a risk register,user-action,"Risk register, inherent/residual scoring, treatment strategies (mitigate, accept, avoid, transfer), threat-based risk assessments",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A001,0.0,,
F1-046-S002,F1-046,The system lets a user maintain a control library with maturity levels,user-action,"Control library with maturity levels, custom framework import/export, Statement of Applicability (SoA)",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A002,0.0,,
F1-046-S003,F1-046,The system lets a user import and export custom frameworks,user-action,custom framework import/export,https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,a,confirmed,F1-046-A003,0.0,,
F1-046-S007,F1-046,The system lets a user require quorum approval and electronic signatures on versioned documents,user-action,"Versioned documents, approval quorums, electronic signatures, PDF export, bulk operations",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A007,0.0,,
F1-046-S008,F1-046,The system lets a user publish a public compliance portal with custom domain support,user-action,"Public compliance portal, NDA management, certification publishing, custom domain support",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A008,0.0,,
F1-046-S009,F1-046,The system lets a user automate compliance work through a command-line client,user-action,"A fully-featured command-line client for scripting, automation, and CI/CD integration.",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A010,0.0,,
F1-046-S010,F1-046,The system lets a user connect an AI agent to read and write compliance data,user-action,"Any MCP-compatible LLM agent (Claude, Cursor, Continue, and others) can connect directly and interact with your compliance data.",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A011,0.0,,
F1-046-S011,F1-046,The system lets a user automate compliance tasks in an external no-code workflow tool,user-action,brings Probo into n8n workflows for no-code automation of compliance tasks over the GraphQL API,https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A012,0.0,,
F1-046-S014,F1-046,"The system lets a user publish certifications, commitments, references, and protected files through a compliance portal",user-action,"Publish certifications, commitments, references, and protected files through the Compliance Portal.",https://www.probo.com/docs/product/getting-started/product-overview.md,03.txt,ab472bc2a3b94f832a3a3364068a0eead61b6dc58b2d554d3d24a2e2b807be90,extract-a,a,confirmed,F1-046-A015,1.0,1.0,
F1-046-S015,F1-046,The system lets a user collect endpoint posture through a device agent,user-action,collect endpoint posture through Device Agent,https://www.probo.com/docs/product/getting-started/product-overview.md,03.txt,ab472bc2a3b94f832a3a3364068a0eead61b6dc58b2d554d3d24a2e2b807be90,extract-a,a,confirmed,F1-046-A016,0.0,,
F1-046-S016,F1-046,The system lets a user invite members to an organization,user-action,Users are invited as members of an organization.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A017,0.0,,
F1-046-S017,F1-046,The system lets a user link one internal control to multiple controls across different frameworks,user-action,A single internal control can satisfy multiple controls across different frameworks.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A018,0.0,,
F1-046-S018,F1-046,"The system lets a user link risks to internal controls, obligations, vendor assessments, and risk-assessment scenarios",user-action,"Risks can be linked to internal controls, obligations, vendor assessments, and structured risk-assessment scenarios.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A019,0.0,,
F1-046-S019,F1-046,"The system lets a user track contracts, conduct risk assessments, and monitor compliance status of third parties",user-action,"Third-party management includes tracking contracts, conducting risk assessments, vetting, and monitoring compliance status.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A020,0.0,,
F1-046-S020,F1-046,The system lets a user inventory assets and link them to the controls and risks that apply,user-action,Assets are inventoried and linked to the controls and risks that apply to them.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A021,0.0,,
F1-046-S022,F1-046,The system lets a user keep tasks in sync with an external issue tracker,user-action,Tasks can stay in sync with Linear.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A023,0.0,,
F1-046-S023,F1-046,"The system lets a user record audit findings as major nonconformity, minor nonconformity, observation, or exception and link them to audits",user-action,"Finding kinds include major nonconformity, minor nonconformity, observation, and exception. Findings can be linked to one or more audits.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A024,0.0,,
F1-046-S024,F1-046,The system lets a user track legal and regulatory obligations separately from framework controls,user-action,Obligations are tracked separately from framework controls to capture jurisdiction-specific requirements.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A025,0.0,,
F1-046-S025,F1-046,"The system lets a user record data processing activities with the data processed, legal basis, retention periods, and data subjects",user-action,"Each record documents what data is processed, the legal basis, retention periods, and data subjects involved.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A026,0.0,,
F1-046-S026,F1-046,The system lets a user run Data Protection Impact Assessments,user-action,"DPIAs evaluate the necessity and proportionality of processing, and identify measures to mitigate risks to data subjects.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A027,1.0,1.0,Excerpt describes DPIAs; running them inferred from section.
F1-046-S027,F1-046,The system lets a user run Transfer Impact Assessments for international data transfers,user-action,TIAs evaluate whether the destination country provides adequate data protection and what supplementary measures are needed.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A028,0.0,,
F1-046-S028,F1-046,The system lets a user record which controls apply to the organization and why in a Statement of Applicability,user-action,A reviewed record of which controls apply to an organization and why.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A029,1.0,1.0,'Statement of Applicability' only in heading.
F1-046-S029,F1-046,"The system lets a user run access review campaigns from Probo memberships, CSV data, or connected providers",user-action,"Campaigns that bring access entries from Probo memberships, CSV data, or connected providers into one review.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A030,0.0,,
F1-046-S030,F1-046,The system lets a user assign a task with an optional due date,user-action,"A task assigns a concrete piece of work, optionally with a due date.",https://www.probo.com/docs/product/compliance-program,05.txt,147eece870536222a9b43241e21d0d6b42ffb743061a5a772a508eabcefebaca,extract-a,both,confirmed,F1-046-A032,0.0,,
F1-046-S031,F1-046,The system lets a user publish a list or statement as a stable representation for review,user-action,Publishing a list or statement creates a stable representation for review.,https://www.probo.com/docs/product/compliance-program,05.txt,147eece870536222a9b43241e21d0d6b42ffb743061a5a772a508eabcefebaca,extract-a,a,confirmed,F1-046-A033,0.0,,
F1-046-S032,F1-046,The system lets a user investigate important changes using an audit log,user-action,use the audit log to investigate important changes,https://www.probo.com/docs/product/compliance-program,05.txt,147eece870536222a9b43241e21d0d6b42ffb743061a5a772a508eabcefebaca,extract-a,both,confirmed,F1-046-A034,0.0,,
F1-046-S033,F1-046,"The system lets a user model threat-based risk assessments with scopes, nodes, boundaries, processes, threats, and scenarios",user-action,"A risk assessment can contain scopes, nodes, boundaries, processes, threats, and scenarios.",https://www.probo.com/docs/product/risk-management,06.txt,37f16da295199d0b4debfde9c708a9f6cd1d22a8bf1675c6cf3689c3dc7ae2d5,extract-a,both,confirmed,F1-046-A035,0.0,,
F1-046-S034,F1-046,The system lets a user export scope diagrams as Mermaid,user-action,Scope diagrams can be exported as Mermaid for use in technical review.,https://www.probo.com/docs/product/risk-management,06.txt,37f16da295199d0b4debfde9c708a9f6cd1d22a8bf1675c6cf3689c3dc7ae2d5,extract-a,both,confirmed,F1-046-A036,0.0,,
F1-046-S035,F1-046,The system lets a user track rights requests such as access or erasure through their lifecycle,user-action,Rights requests track requests such as access or erasure through their operational lifecycle.,https://www.probo.com/docs/product/privacy-management,07.txt,93ec7c88a62ac0ed027583a80b9de708a9e55cfedb9d4891d91d432c21e94e38,extract-a,both,confirmed,F1-046-A037,0.0,,
F1-046-S036,F1-046,The system lets a visitor submit a rights request from the public site through a compliance portal,user-action,"To let visitors submit a request from your public site, see Rights requests in the Compliance Portal.",https://www.probo.com/docs/product/privacy-management,07.txt,93ec7c88a62ac0ed027583a80b9de708a9e55cfedb9d4891d91d432c21e94e38,extract-a,both,confirmed,F1-046-A038,0.0,,
F1-046-S037,F1-046,The system lets a user authenticate with SAML single sign-on through an identity provider,user-action,use SAML single sign-on (SSO) to authenticate them through your identity provider,https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,both,confirmed,F1-046-A039,0.0,,
F1-046-S038,F1-046,"The system lets an administrator create, update, and deactivate user access from an identity provider with SCIM",user-action,"use SCIM to create, update, and deactivate their access",https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,both,confirmed,F1-046-A040,0.0,,
F1-046-S040,F1-046,The system lets an administrator map membership roles from an identity provider with a SAML role attribute,user-action,or map them from your identity provider with the SAML Role Attribute,https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,both,confirmed,F1-046-A042,0.0,,
F1-046-S041,F1-046,The system lets an administrator verify the email domain used by organization members,user-action,Verify the email domain used by organization members.,https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,a,confirmed,F1-046-A043,1.0,1.0,"Administrator from context, not excerpt."
F1-046-S042,F1-046,The system lets an owner or admin create tasks,user-action,Owners and admins can create tasks.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A044,0.0,,
F1-046-S043,F1-046,"The system lets a viewer read tasks, comments, and activity",user-action,"Viewers can read tasks, comments, and activity.",https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A045,0.0,,
F1-046-S044,F1-046,The system lets a user search tasks by name and filter them by state or assignee,user-action,The list can be searched by name and filtered by state or assignee.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A046,0.0,,
F1-046-S045,F1-046,"The system lets a user reorder tasks by dragging, which updates the priority when dropped next to tasks of another priority",user-action,Drag a task to change its order. Dropping it next to tasks of another priority updates its priority too.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A047,0.0,,
F1-046-S046,F1-046,The system lets a user set a time estimate on a task as a duration,user-action,"Expected effort, as an ISO-8601 duration such as PT2H or P1D.",https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A048,0.0,,
F1-046-S047,F1-046,"The system lets a user set a task state of backlog, to do, in progress, done, canceled, or duplicate",user-action,Defaults to To do.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A049,0.0,,
F1-046-S048,F1-046,"The system lets a user set a task priority of urgent, high, medium, or low",user-action,"Urgent, High, Medium, or Low. Defaults to Medium.",https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A050,0.0,,
F1-046-S049,F1-046,The system lets a user comment on a task,user-action,The task page has a comment thread and an activity log.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A052,0.0,,
F1-046-S050,F1-046,The system lets an author edit or delete their own task comment,user-action,The author can edit or delete their own comment.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A053,0.0,,
F1-046-S051,F1-046,The system lets an owner or admin delete any task comment,user-action,Owners and admins can delete any comment.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A054,0.0,,
F1-046-S053,F1-046,The system lets a user publish a task as a new issue in an external issue tracker,user-action,Publish creates a new Linear issue in the team you pick.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A056,0.0,,
F1-046-S054,F1-046,The system lets a user link a task to an existing issue in an external issue tracker,user-action,Link attaches the task to an issue that already exists in that team.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A057,0.0,,
F1-046-S055,F1-046,The system lets a user stop syncing a task with an external issue tracker by unlinking it,user-action,Unlink on the task removes the connection.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A059,0.0,,
F1-046-S056,F1-046,The system lets a user take a point-in-time snapshot of identities and permissions for an access review,user-action,"Access reviews let an organization take a point-in-time snapshot of identities and permissions, record reviewer decisions, and preserve the result of the campaign.",https://www.probo.com/docs/product/access-review/overview,10.txt,143d70aaa4ec5508716aaff56fd2ff57deb400d7556476fc1eb4b5460a7d2393,extract-a,both,confirmed,F1-046-A060,0.0,,
F1-046-S057,F1-046,The system lets a reviewer record a decision on each access entry and add flags,user-action,"Review entries, add flags where useful, and record decisions.",https://www.probo.com/docs/product/access-review/overview,10.txt,143d70aaa4ec5508716aaff56fd2ff57deb400d7556476fc1eb4b5460a7d2393,extract-a,both,confirmed,F1-046-A061,0.0,,
F1-046-S058,F1-046,The system lets a user complete an access review campaign once every entry has a decision,user-action,Complete the campaign after every entry has a decision.,https://www.probo.com/docs/product/access-review/overview,10.txt,143d70aaa4ec5508716aaff56fd2ff57deb400d7556476fc1eb4b5460a7d2393,extract-a,both,confirmed,F1-046-A062,0.0,,