Compliance section overview

What the Compliance section is

Compliance is where Verinode keeps the three things that put a restoration business at risk of losing a carrier program, failing an audit, or getting caught flat by a new rule: gaps between the coverage or certifications you actually hold and what's required of you, the audits carriers and certifying bodies run on you, and the regulations that apply to your state and service mix. Verinode reads your insurance policies, program memberships, audit notices, and the regulatory catalog, and lays all three out as one posture. It never files anything or acknowledges a regulation on your behalf. It surfaces what it finds and recommends what to do next. You decide.

The section rolls everything up into a single Shield Score, 0 to 100, blended from five domains: training, insurance, carrier, regulatory, and safety. Each domain starts at 100 and loses 20 points per unresolved critical gap and 8 points per warning-level gap in that domain, floored at 0. The overall score is the average of the five. When there isn't yet enough data to run that full domain model, Compliance falls back to a simpler proxy: the share of your last 12 months of completed audits that scored 80% or higher.

Where to find it

Open Compliance from the sidebar, at iq.verinode.ai/compliance. Two other sidebar entries actually land you here too, on a different tab: Audits opens Compliance on the Audits tab, and Risk opens it on the Exposures tab. All three are the same page and the same data, just a different starting tab, so anything this article says about exposures or audits applies whichever door you came in.

If Compliance hasn't been switched on for your account yet, you'll see a "Switch on Compliance" panel instead of the live page: a blurred preview of the real layout behind a single button. Turning it on is one click and the real page renders in its place. That's a one-time activation step, separate from your membership tier, and it exists so a section you haven't asked for doesn't run its (more expensive) data fetch in the background. The section's own summary line, if you're deciding whether to switch it on, is "Your exposure, audit windows, and the requirements that apply to you."

Who sees what

Every membership tier sees the full Compliance layout, the hero, the Explore tiles, the frameworks row, all of it. What's gated by tier is the underlying detail: exposure records, audit windows, and the regulatory radar itself. On a Contributor or Executive membership, the section shows a running count instead of the detail, worded as "Verinode is tracking N compliance records for you. Upgrade to Premier to see exposure detail, audit windows, and regulatory radar." (or, with nothing on file yet, "Compliance intelligence, exposure tracking, audit windows, regulatory radar, unlocks at Premier.") Premier unlocks the full page.

The layout, row by row

Compliance Posture (hero)

The top of the page is a single hero panel. The big number is your Shield Score, with a pill next to it reading "N Shield Score" toned green (Expand) at 80 and above, amber (Maintain) from 60 to 79, and red (Analyse) below 60. Underneath, a line of context that changes with what's actually going on: if you have no compliance records at all yet it reads "Add Data, exposures, audits, and regulations populate here as they come in." If you have critical exposures open, it leads with those ("N critical exposure(s) open, needs attention."). Otherwise, if an audit is coming up, it names it and counts the days. Failing all of that, it falls back to how many regulations are tracked for your jurisdiction.

Two smaller stats sit beside the score:

• Critical Open, the count of exposures at critical severity, subtitled "Needs Action Now" when there are any, "No Critical Exposures" when there aren't.
• Audits Due, upcoming audits in the next 30 days plus any that are overdue, subtitled with whichever is true: "N Overdue," "In Next 30 Days," or "No Audits Scheduled."

Take Action

This row is where you start a conversation or launch a focused view, not where you read numbers. It carries:

• An agent activation tile, your entry point into a chat with IQ's compliance specialists. This is the fastest way to ask a question in plain language instead of hunting for the right tile.
• An SLA Compliance launch tile ("Your carrier scorecard").
• An Insurance launch tile ("Track coverage and renewals").
• An unlock-this-section tile, which only appears while your compliance data is thin, naming exactly what's still missing and which tool it normally comes from.
• Your live decisions, the specific compliance actions Verinode has surfaced for you (see the decision workspace for how these work platform-wide). Until decisions exist, this row shows one of three empty states depending on where you are:

- No compliance records yet: "Get your compliance posture on the radar," with three concrete first moves: upload your most recent COI or carrier-program audit ("GL, WC, auto, umbrella COIs, or PSP / ASP / DRP audit reports"), forward an audit-notice or regulator email (with a link to set up auto-forwarding under Connect), or paste a regulation update or compliance memo. Footer: "Exposure, audit, and regulation signals surface as your data lands." - Records on file, decisions already resolved: "All clear on your compliance posture," reporting how many signals you've worked through and noting that new audits, exposures, and regulation changes will keep surfacing. - Records on file, nothing resolved yet: "Still learning your compliance posture," while the detector analyzes coverage, audit readiness, and state-level applicability.

Explore

Seven metric tiles, each opening straight into the matching tab of the Compliance detail view when you click it.

• Shield Score. A gauge (thresholds at 60 and 80) showing where your overall score sits, subtitled "training + insurance + carrier + regulatory + safety." When you have peer or research benchmark data available, a peer-delta line shows how your score compares. Click opens the Benchmarks tab.
• Cross-Domain Stacks. A count of open findings from the nightly compliance-synthesizer, cases where it's connected two or more separate domain signals into one root-cause story. Zero reads "no stacks, clean posture." Click opens the Findings tab.
• Open Exposures. A dot for every open exposure, with the critical ones lit up in the "bad" color so severity and count read at a glance. Subtitled "N breaching" when any are critical, "All covered" otherwise. Click opens the Exposures tab.
• Next Audit / Audits Overdue / Audits. The label and value adapt to what's true: if anything is overdue it becomes "Audits Overdue" and shows that count; otherwise it becomes "Next Audit" and counts down the days to the nearest scheduled or in-progress one; with nothing scheduled it falls back to "Audits" and your total on file. Click opens the Audits tab.
• Regulations. Value reads "compliant / total" (or a dash with nothing tracked), subtitled with how many are exposed and, when relevant, how many arrived via autofeed in the last 30 days. Click opens the Regulations tab.
• Regulatory Autofeed. How many new regulations the weekly regulatory-scan cron has pulled into your applicable list in the last 30 days. Zero reads "system is watching, none new this month." Click opens the Regulations tab.
• Specialist Activity. How many of the compliance specialists on your roster (the group covering regulatory navigation, insurance, policy drafting, cert renewals, program eligibility, OSHA, state licensing, carrier programs, contract clauses, audit simulation, and environmental/waste disposal) have actually run for you in the last 30 days, shown as "active / total." At zero it reads how many experts are on standby; otherwise it names how many engaged. Click opens the Findings tab.

Compliance frameworks

This row scores your written-program readiness against named regulatory frameworks (HazCom, OSHA recordkeeping, EPA RRP, and others in the catalog), one tile per framework. Each tile shows a percentage score on a gauge (thresholds at 50 and 80), and a subtitle naming how many of the framework's elements are in place, plus the next missing element by name once you're not at 100%. Clicking a tile opens a detail panel with every control, a status dot per row (green when at least 80% complete, amber when partially in place, gray when missing), its section grouping, and a plain status word: In place, Partial (N%), or Missing. The panel's header line is explicit about what this is and isn't: "N of M elements in place, X% inspection-ready... This is a completeness check, not a certification."

From that panel you can:

• Draft a starter program with IQ, when the framework's written-program control is missing. IQ produces a draft, saves it to your policy library, and gives you a "Download PDF" button, with the caveat spelled out on screen: "It is a starting point, not legal advice. Review it with a qualified safety professional, then download it for your records."
• Upload evidence, which opens the same capture flow as the header's Add Data button.
• Download compliance binder (all policies, PDF), a single branded PDF of your whole posture, meant to hand to an auditor.

A framework doesn't stay green forever on old proof. Evidence that carries no explicit expiration is treated as good for about a year from when it was assessed, then the control reverts to missing until you refresh it, this is what keeps the score a picture of your current state rather than a one-time checkbox.

Until any framework data exists, the row reads: "Framework readiness (HazCom, OSHA recordkeeping, EPA RRP) will appear here. Forward or upload your written programs, SDS library, and training records and IQ scores each element for you."

Most recent

A scrollable stack of your most recent compliance records across all three kinds, sorted critical severity first, then soonest due date. Each tile shows the record's kind as its label (Exposure, Audit, or Regulation), its title, a colored severity dot (red for critical, amber for warning, green for info) next to its status, and, when the record has a due date inside the next 60 days or is already overdue, a badge like "12d" or "5d overdue." Clicking a tile opens the matching detail tab scrolled to that exact record.

With nothing on file yet, this row reads: "Compliance records will appear as you forward audit notices, drop COIs, or acknowledge regulations."

The three record kinds

Clicking any Explore tile, or the header Add Data / Compliance nav entries, opens a slide-over with five tabs across the top: Findings, Exposures, Audits, Regulations, Benchmarks. The three record kinds live in the middle three tabs.

Exposures

An exposure is a gap between the coverage you actually hold and what's required, either by a carrier program you belong to or by the nature of the work you do. Exposures are not a table you fill in: Verinode computes them live, every time the page loads, from your insurance policies, your active carrier-program memberships, and your service mix. There's nothing to create here, just coverage to close.

Three kinds surface today:

• Missing required policy. One of your active carrier programs (Liberty Mutual Preferred, Travelers ASP, State Farm PSP, Allstate DRP, Servpro, and similar) requires a policy type, general liability, workers' comp, commercial auto, that you don't currently have active. Severity: critical. Remediation reads plainly, e.g. "Contact broker to bind a workers comp policy and upload the COI."
• EMR commercial gate. Your workers' comp experience modification rate (EMR) has crossed 1.25, the threshold most large commercial carrier programs use to disqualify a contractor until EMR trends back down over two to three policy years. Severity: critical. Remediation points you to request a loss run and work with the insurance-advisor specialist on a 12-month pull-down plan.
• Coverage type missing. You run a service line, mold or biohazard, whose policies typically need a specific endorsement (a pollution endorsement, in this case), and Verinode hasn't been able to confirm that endorsement is present on your policy. This one is a heuristic flag, severity info, meant to raise the question rather than assert a finding: "Confirm with broker that [policy] includes a [endorsement]. Upload the declaration page if available."

Each exposure's status reads Breaching (critical), Exposed (warning), or Drift (info), and when it's tied to a specific program membership, the subtitle names which one requires it ("Required by Liberty Mutual Preferred").

Empty state: "No exposures detected, coverage matches active program requirements."

Audits

An audit is a scheduled or completed review, run by a carrier program, a certifying body, or your own internal process, of your operation against a standard. Unlike exposures, audits are a real record you build over time: audit kind, auditor name, scope, scheduled date, completed date, result score, and status (scheduled, in progress, completed, or canceled).

A title reads as "{Audit Kind} audit, {Auditor}" (for example, "Carrier Program audit, State Farm"). Status reads as: "Completed (N%)" once scored, "Canceled" if canceled, "Overdue Nd" in red if the scheduled date has passed with the audit still open, "Nd out" in amber inside 14 days, and plain "Nd out" further ahead. A completed audit that scored under 75% is flagged warning even though it's finished, because a low score is itself worth a second look.

The single nearest scheduled or in-progress audit drives the hero's "Audits Due" stat and the Explore row's Next Audit tile.

Empty state: "No audits on file. Upload an audit notice via Add Data to schedule one."

Regulations

A regulation is a change tracked in Verinode's shared regulatory catalog, filtered down to the ones that actually apply to you: federal rules always show, state rules only show when they match your operator profile's state, and rules scoped to a service mix only show when your service mix overlaps theirs. Against each applicable regulation, Verinode tracks your own status, whether you've acknowledged it, marked it in progress, marked yourself compliant, or claimed an exemption.

Status reads relative to the regulation's effective date and your own state: once effective and you're compliant or exempt, it reads "Compliant" or "Exempt"; once effective with work underway it reads "In progress" (warning); once effective with nothing on record it reads "Effective, adopt" (critical); before it takes effect it counts down as "Nd to effective," turning amber inside 30 days. The subtitle names the source and jurisdiction (for example, "OSHA · federal" or "State DOI · state CA").

Regulations that arrive through the weekly regulatory-scan autofeed cron carry a small badge: "NEW · Autofeed" for their first 14 days on your list, then a plain "Autofeed" badge afterward, so you can always tell a system-detected regulation from one you entered by hand.

Empty state: "No applicable regulations in the catalog for your state + service mix."

Findings and Benchmarks (the other two tabs)

Findings is where the section's actual decisions live. At the top, when the nightly compliance-synthesizer has connected signals across two or more domains into a single root-cause story, you'll see one or more Cross-Domain Stack cards: a headline, a plain-language synthesis, the root cause named directly, a monthly cost-of-inaction figure when one applies, and a numbered 30/60/90-day action sequence, each step tagged with the specialist who's best positioned to run it (Insurance, Regulatory, Policy, Cert Renewal, Program Eligibility, OSHA, State Licensing, Carrier Program, Contract, Audit Simulator, Environmental Disposal). Each stack has Act (opens the full decision workspace), Not now (parks it), Ignore (dismisses it), and Acknowledge with note. Below the stacks, your regular compliance decisions render as a standard findings grid.

Benchmarks compares two of your numbers, your compliance shield score and your audit pass rate, against a peer figure (from operators sized similarly to you) and a research figure (from industry sources), side by side with a scope label. Verinode uses the peer number when there's a large enough group of comparable operators to protect anyone's individual identity; otherwise it falls back to the research figure so you're never shown a number that could be traced to another specific operator. See how benchmarks work and reading a benchmark for the mechanics behind every peer comparison on the platform.

How data flows in

Nothing in Compliance is something you sit down and build from scratch. Each kind fills in from a different real-world source:

• Exposures need no manual entry at all. The moment your insurance policies and carrier-program memberships are on file (through connecting your data or a direct upload), Verinode recomputes exposures against them on every page load.
• Audits appear once you forward or upload an audit notice, audit report, or scorecard through Add Data, or once you set up auto-forwarding so future notices land automatically. See forwarding documents for that setup.
• Regulations arrive two ways: the weekly regulatory-scan autofeed pulls new entries into the shared catalog and applies them to you automatically if they match your state and service mix, or you can paste a regulation update or a compliance memo directly and IQ structures it for you.
• Compliance frameworks score from whatever evidence you forward or upload (written programs, SDS library entries, training records), plus two things Verinode can already infer without any extra setup: an active hazmat safety policy on file satisfies HazCom's written-program control, and an active HazCom training certification on a team member satisfies its training control.

The Add Data button in the page header opens the same capture flow from anywhere in the section, so there's always one obvious way in regardless of which tile or tab you're looking at.

Data sources