Risk & Exposures: where it lives now

The short answer

There is no standalone Risk section anymore. If you land on /risk, whether from an old bookmark, a saved link, or muscle memory, Verinode sends you straight to Compliance, opened on its Exposures tab. That is not a broken link and not a downgrade: exposures were folded into Compliance because a coverage gap, an overdue audit, and a new regulation are three views on the same underlying question ("is this operation covered the way it needs to be"), and Compliance is where Verinode already answers that question in full.

Where to find it

In the left sidebar, open the Compliance section and click Compliance (iq.verinode.ai/compliance). There is one nav item under that heading, not two, so you will not see "Risk" listed separately.

The Compliance page opens on the same shell every section uses: a hero band at the top, a Take Action row, an Explore row of metric tiles, a Compliance frameworks row, and a Most recent row. Below that sits a card slider with five tabs running across it:

• Findings
• Exposures
• Audits
• Regulations
• Benchmarks

Exposures is the second tab. You can reach it two ways: click straight into the Exposures tab in the slider, or click the Open Exposures tile in the Explore row, which jumps you into the same tab.

What an exposure actually is

An exposure is not a record you create, edit, or close out. It is a derived view: Verinode compares the coverage you currently hold against the coverage a program, a policy floor, or a service line requires, and surfaces the gap. Nothing is stored as an "exposure" row in the database; every exposure is recalculated each time the page loads, from your insurance policies, your active carrier-program memberships, and your service mix. Fix the underlying coverage (bind a policy, get the EMR down, confirm an endorsement) and the exposure simply stops appearing, because there is nothing to derive anymore.

That also means there is nothing to "dismiss" or "mark resolved." If an exposure keeps showing up, the gap it is describing is still open.

Verinode currently derives three kinds of exposure:

1. 1Missing required policy. You are enrolled in a carrier program (for example a preferred, DRP, ASP, or PSP-style program) and that program requires an active policy type, most commonly general liability or workers' comp, that you do not currently have on file as active. Verinode flags one exposure per missing policy type per program.
2. 2EMR commercial gate. Your workers' comp Experience Modification Rate (EMR) has crossed the threshold most commercial carrier programs use to disqualify a contractor. Verinode reads the EMR off your most recently expiring active workers' comp policy.
3. 3Coverage type possibly missing on an active service line. You run a service line, currently mold or biohazard work, that typically needs a specific endorsement on your general liability policy, and Verinode has not been able to confirm that endorsement from the policy data it has. This is a heuristic prompt to check, not a confirmed gap: Verinode has not parsed your certificate of insurance for endorsement language yet, so it is surfacing the question rather than asserting the answer.

Reading the Exposures tab

Each open exposure appears as a row in a list, sorted so the ones needing attention surface first. Clicking a row opens its detail:

• Title: a plain description of the gap, for example "Missing workers comp" or an EMR figure over the gate ("EMR 1.31, commercial gate breached").
• Status label next to the title, in color: Breaching (red) for a critical severity exposure, Exposed (amber) for a warning-level one, or Drift (muted gray) for an informational one like the endorsement-confirmation heuristic.
• Subtitle, reading "Required by [program name]" when a specific carrier program is the source of the requirement; blank when the exposure is not tied to a named program (the EMR gate, for instance, is a general market-standard gate rather than one program's rule).

Click into an exposure and the detail view breaks it down further:

• Severity: info, warning, or critical, restated with the same color coding.
• Current: what you actually have on file right now (for example "Not on file," or an EMR value like "1.31").
• Required: the state you need to reach (for example "Active policy," or "<1.25 (commercial); <1.0 (preferred)").
• Required by: the program or programs driving the requirement, or a dash when the requirement is not program-specific.
• Kind: the underlying exposure type in plain words (missing required policy, EMR commercial gate, coverage type missing).
• Description: a full sentence naming exactly which policy and which program (or service line) triggered the flag.
• Remediation: the concrete next step Verinode suggests, for example "Contact broker to bind a workers comp policy and upload the COI" or "Request a loss run and work with the insurance-advisor on the 12-month pull-down plan." This is a recommendation, not an action Verinode takes for you; binding the policy, filing the endorsement, or working the EMR plan is still yours to do.

The Open Exposures tile

In the Explore row on the Compliance home, one tile is labeled Open Exposures. It shows:

• A count of currently open exposures.
• Underneath, "All covered" when the count is zero, or "N breaching" when one or more exposures are critical severity.
• A dot-grid preview: one dot per open exposure, with the critical ones lit differently so you can see both the count and the severity mix at a glance.
• The tile is colored copper when at least one exposure is breaching (critical), amber when there are open exposures but none critical, and green when there are none at all.

Clicking the tile opens the Exposures tab directly.

Empty state

If Verinode has not found any coverage gap against your current policies, programs, and service mix, the Exposures tab reads:

"No exposures detected, coverage matches active program requirements."

That is a real, computed clean state, not a placeholder for missing data. It means your active insurance policies satisfy every program you are enrolled in, your EMR is under the commercial gate, and no service-line endorsement question is flagged. It can still change the next time you load the page, for instance if a policy expires, a program membership is added, or your service mix changes.

If you have not connected any insurance or program data at all, the wider Compliance home shows its own cold-start state ("Get your compliance posture on the radar") prompting you to upload a certificate of insurance, forward an audit notice, or paste a regulation update. Exposures cannot be computed with nothing to compare against, so an empty Exposures tab on a brand-new account usually means the underlying insurance and program data has not flowed in yet, not that everything is covered.

How this fits with the rest of Compliance

Exposures sit alongside two other derived and tracked views in the same slider:

• Audits: scheduled, in-progress, or completed carrier-program and regulatory audits, tracked as real records with dates and scores.
• Regulations: applicable regulatory changes for your state and service mix, joined against your acknowledgment/compliance status on each one.

All three, plus the cross-domain Findings the compliance synthesizer surfaces and the Benchmarks tab comparing your posture to peers, feed the same Shield Score at the top of the Compliance page, a single 0-100 read on training, insurance, carrier-program, regulatory, and safety posture together. An exposure closing (because you bound the missing policy, or your EMR trended back down) is one of the direct ways that score moves.

Verinode surfaces every exposure, along with the recommended remediation; it does not bind policies, file endorsements, or negotiate your EMR paydown for you. Those calls, and the work behind them, stay with you.

Related reading

• Clients and carriers
• Connecting your data
• Forwarding documents
• How benchmarks work
• The decision workspace