feature_id,app_id,statement,form,excerpt,source_url,source_file,source_sha256,found_by,found_by_runs,verification,pipeline_id,audited,audit_correct,audit_note
F1-046-S001,F1-046,The system lets a user maintain a risk register,user-action,"Risk register, inherent/residual scoring, treatment strategies (mitigate, accept, avoid, transfer), threat-based risk assessments",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A001,0.0,,
F1-046-S002,F1-046,The system lets a user maintain a control library with maturity levels,user-action,"Control library with maturity levels, custom framework import/export, Statement of Applicability (SoA)",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A002,0.0,,
F1-046-S003,F1-046,The system lets a user import and export custom frameworks,user-action,custom framework import/export,https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,a,confirmed,F1-046-A003,0.0,,
F1-046-S007,F1-046,The system lets a user require quorum approval and electronic signatures on versioned documents,user-action,"Versioned documents, approval quorums, electronic signatures, PDF export, bulk operations",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A007,0.0,,
F1-046-S008,F1-046,The system lets a user publish a public compliance portal with custom domain support,user-action,"Public compliance portal, NDA management, certification publishing, custom domain support",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A008,0.0,,
F1-046-S009,F1-046,The system lets a user automate compliance work through a command-line client,user-action,"A fully-featured command-line client for scripting, automation, and CI/CD integration.",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A010,0.0,,
F1-046-S010,F1-046,The system lets a user connect an AI agent to read and write compliance data,user-action,"Any MCP-compatible LLM agent (Claude, Cursor, Continue, and others) can connect directly and interact with your compliance data.",https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A011,0.0,,
F1-046-S011,F1-046,The system lets a user automate compliance tasks in an external no-code workflow tool,user-action,brings Probo into n8n workflows for no-code automation of compliance tasks over the GraphQL API,https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md,01.txt,e77c453bd31e554ee701c5b9e894d5f9a8f0b7f809790c0ac019f57bc80195cf,extract-a,both,confirmed,F1-046-A012,0.0,,
F1-046-S014,F1-046,"The system lets a user publish certifications, commitments, references, and protected files through a compliance portal",user-action,"Publish certifications, commitments, references, and protected files through the Compliance Portal.",https://www.probo.com/docs/product/getting-started/product-overview.md,03.txt,ab472bc2a3b94f832a3a3364068a0eead61b6dc58b2d554d3d24a2e2b807be90,extract-a,a,confirmed,F1-046-A015,1.0,1.0,
F1-046-S015,F1-046,The system lets a user collect endpoint posture through a device agent,user-action,collect endpoint posture through Device Agent,https://www.probo.com/docs/product/getting-started/product-overview.md,03.txt,ab472bc2a3b94f832a3a3364068a0eead61b6dc58b2d554d3d24a2e2b807be90,extract-a,a,confirmed,F1-046-A016,0.0,,
F1-046-S016,F1-046,The system lets a user invite members to an organization,user-action,Users are invited as members of an organization.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A017,0.0,,
F1-046-S017,F1-046,The system lets a user link one internal control to multiple controls across different frameworks,user-action,A single internal control can satisfy multiple controls across different frameworks.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A018,0.0,,
F1-046-S018,F1-046,"The system lets a user link risks to internal controls, obligations, vendor assessments, and risk-assessment scenarios",user-action,"Risks can be linked to internal controls, obligations, vendor assessments, and structured risk-assessment scenarios.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A019,0.0,,
F1-046-S019,F1-046,"The system lets a user track contracts, conduct risk assessments, and monitor compliance status of third parties",user-action,"Third-party management includes tracking contracts, conducting risk assessments, vetting, and monitoring compliance status.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A020,0.0,,
F1-046-S020,F1-046,The system lets a user inventory assets and link them to the controls and risks that apply,user-action,Assets are inventoried and linked to the controls and risks that apply to them.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A021,0.0,,
F1-046-S021,F1-046,The system automatically repeats a task when its deadline passes,automation,"A task has a state, a priority, an optional deadline, and can repeat when that deadline passes.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A022,0.0,,
F1-046-S022,F1-046,The system lets a user keep tasks in sync with an external issue tracker,user-action,Tasks can stay in sync with Linear.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A023,0.0,,
F1-046-S023,F1-046,"The system lets a user record audit findings as major nonconformity, minor nonconformity, observation, or exception and link them to audits",user-action,"Finding kinds include major nonconformity, minor nonconformity, observation, and exception. Findings can be linked to one or more audits.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A024,0.0,,
F1-046-S024,F1-046,The system lets a user track legal and regulatory obligations separately from framework controls,user-action,Obligations are tracked separately from framework controls to capture jurisdiction-specific requirements.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A025,0.0,,
F1-046-S025,F1-046,"The system lets a user record data processing activities with the data processed, legal basis, retention periods, and data subjects",user-action,"Each record documents what data is processed, the legal basis, retention periods, and data subjects involved.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A026,0.0,,
F1-046-S026,F1-046,The system lets a user run Data Protection Impact Assessments,user-action,"DPIAs evaluate the necessity and proportionality of processing, and identify measures to mitigate risks to data subjects.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,both,confirmed,F1-046-A027,1.0,1.0,Excerpt describes DPIAs; running them inferred from section.
F1-046-S027,F1-046,The system lets a user run Transfer Impact Assessments for international data transfers,user-action,TIAs evaluate whether the destination country provides adequate data protection and what supplementary measures are needed.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A028,0.0,,
F1-046-S028,F1-046,The system lets a user record which controls apply to the organization and why in a Statement of Applicability,user-action,A reviewed record of which controls apply to an organization and why.,https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A029,1.0,1.0,'Statement of Applicability' only in heading.
F1-046-S029,F1-046,"The system lets a user run access review campaigns from Probo memberships, CSV data, or connected providers",user-action,"Campaigns that bring access entries from Probo memberships, CSV data, or connected providers into one review.",https://www.probo.com/docs/product/getting-started/core-concepts.md,04.txt,e3b36b581034eb29286d82d99985eafa075a5ad4978f7374e6b64fd832777bb8,extract-a,a,confirmed,F1-046-A030,0.0,,
F1-046-S030,F1-046,The system lets a user assign a task with an optional due date,user-action,"A task assigns a concrete piece of work, optionally with a due date.",https://www.probo.com/docs/product/compliance-program,05.txt,147eece870536222a9b43241e21d0d6b42ffb743061a5a772a508eabcefebaca,extract-a,both,confirmed,F1-046-A032,0.0,,
F1-046-S031,F1-046,The system lets a user publish a list or statement as a stable representation for review,user-action,Publishing a list or statement creates a stable representation for review.,https://www.probo.com/docs/product/compliance-program,05.txt,147eece870536222a9b43241e21d0d6b42ffb743061a5a772a508eabcefebaca,extract-a,a,confirmed,F1-046-A033,0.0,,
F1-046-S032,F1-046,The system lets a user investigate important changes using an audit log,user-action,use the audit log to investigate important changes,https://www.probo.com/docs/product/compliance-program,05.txt,147eece870536222a9b43241e21d0d6b42ffb743061a5a772a508eabcefebaca,extract-a,both,confirmed,F1-046-A034,0.0,,
F1-046-S033,F1-046,"The system lets a user model threat-based risk assessments with scopes, nodes, boundaries, processes, threats, and scenarios",user-action,"A risk assessment can contain scopes, nodes, boundaries, processes, threats, and scenarios.",https://www.probo.com/docs/product/risk-management,06.txt,37f16da295199d0b4debfde9c708a9f6cd1d22a8bf1675c6cf3689c3dc7ae2d5,extract-a,both,confirmed,F1-046-A035,0.0,,
F1-046-S034,F1-046,The system lets a user export scope diagrams as Mermaid,user-action,Scope diagrams can be exported as Mermaid for use in technical review.,https://www.probo.com/docs/product/risk-management,06.txt,37f16da295199d0b4debfde9c708a9f6cd1d22a8bf1675c6cf3689c3dc7ae2d5,extract-a,both,confirmed,F1-046-A036,0.0,,
F1-046-S035,F1-046,The system lets a user track rights requests such as access or erasure through their lifecycle,user-action,Rights requests track requests such as access or erasure through their operational lifecycle.,https://www.probo.com/docs/product/privacy-management,07.txt,93ec7c88a62ac0ed027583a80b9de708a9e55cfedb9d4891d91d432c21e94e38,extract-a,both,confirmed,F1-046-A037,0.0,,
F1-046-S036,F1-046,The system lets a visitor submit a rights request from the public site through a compliance portal,user-action,"To let visitors submit a request from your public site, see Rights requests in the Compliance Portal.",https://www.probo.com/docs/product/privacy-management,07.txt,93ec7c88a62ac0ed027583a80b9de708a9e55cfedb9d4891d91d432c21e94e38,extract-a,both,confirmed,F1-046-A038,0.0,,
F1-046-S037,F1-046,The system lets a user authenticate with SAML single sign-on through an identity provider,user-action,use SAML single sign-on (SSO) to authenticate them through your identity provider,https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,both,confirmed,F1-046-A039,0.0,,
F1-046-S038,F1-046,"The system lets an administrator create, update, and deactivate user access from an identity provider with SCIM",user-action,"use SCIM to create, update, and deactivate their access",https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,both,confirmed,F1-046-A040,0.0,,
F1-046-S040,F1-046,The system lets an administrator map membership roles from an identity provider with a SAML role attribute,user-action,or map them from your identity provider with the SAML Role Attribute,https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,both,confirmed,F1-046-A042,0.0,,
F1-046-S041,F1-046,The system lets an administrator verify the email domain used by organization members,user-action,Verify the email domain used by organization members.,https://www.probo.com/docs/product/identity-and-access,08.txt,9f72053fe7642cffa692a783e092bd9b2b297c6f9bf2e65a9e4eaf2bd9d96765,extract-a,a,confirmed,F1-046-A043,1.0,1.0,"Administrator from context, not excerpt."
F1-046-S042,F1-046,The system lets an owner or admin create tasks,user-action,Owners and admins can create tasks.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A044,0.0,,
F1-046-S043,F1-046,"The system lets a viewer read tasks, comments, and activity",user-action,"Viewers can read tasks, comments, and activity.",https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A045,0.0,,
F1-046-S044,F1-046,The system lets a user search tasks by name and filter them by state or assignee,user-action,The list can be searched by name and filtered by state or assignee.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A046,0.0,,
F1-046-S045,F1-046,"The system lets a user reorder tasks by dragging, which updates the priority when dropped next to tasks of another priority",user-action,Drag a task to change its order. Dropping it next to tasks of another priority updates its priority too.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A047,0.0,,
F1-046-S046,F1-046,The system lets a user set a time estimate on a task as a duration,user-action,"Expected effort, as an ISO-8601 duration such as PT2H or P1D.",https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A048,0.0,,
F1-046-S047,F1-046,"The system lets a user set a task state of backlog, to do, in progress, done, canceled, or duplicate",user-action,Defaults to To do.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A049,0.0,,
F1-046-S048,F1-046,"The system lets a user set a task priority of urgent, high, medium, or low",user-action,"Urgent, High, Medium, or Low. Defaults to Medium.",https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A050,0.0,,
F1-046-S049,F1-046,The system lets a user comment on a task,user-action,The task page has a comment thread and an activity log.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A052,0.0,,
F1-046-S050,F1-046,The system lets an author edit or delete their own task comment,user-action,The author can edit or delete their own comment.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A053,0.0,,
F1-046-S051,F1-046,The system lets an owner or admin delete any task comment,user-action,Owners and admins can delete any comment.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,a,confirmed,F1-046-A054,0.0,,
F1-046-S052,F1-046,The system automatically records an activity entry with the previous and new value when a task is created or updated,automation,"Activity records creates and updates for the name, description, state, priority, assignee, internal control, deadline, and time estimate. Each entry stores the previous value and the new value.",https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A055,0.0,,
F1-046-S053,F1-046,The system lets a user publish a task as a new issue in an external issue tracker,user-action,Publish creates a new Linear issue in the team you pick.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A056,0.0,,
F1-046-S054,F1-046,The system lets a user link a task to an existing issue in an external issue tracker,user-action,Link attaches the task to an issue that already exists in that team.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A057,0.0,,
F1-046-S055,F1-046,The system lets a user stop syncing a task with an external issue tracker by unlinking it,user-action,Unlink on the task removes the connection.,https://www.probo.com/docs/product/tasks/overview,09.txt,0c169416ab4dff1276eaf950b56d391f2f06a9fe5afb46188c4c8a4c9db6c6c4,extract-a,both,confirmed,F1-046-A059,0.0,,
F1-046-S056,F1-046,The system lets a user take a point-in-time snapshot of identities and permissions for an access review,user-action,"Access reviews let an organization take a point-in-time snapshot of identities and permissions, record reviewer decisions, and preserve the result of the campaign.",https://www.probo.com/docs/product/access-review/overview,10.txt,143d70aaa4ec5508716aaff56fd2ff57deb400d7556476fc1eb4b5460a7d2393,extract-a,both,confirmed,F1-046-A060,0.0,,