Skip to content

EntiHub Documentation

Regulatory Obligation Registry

Regulatory Obligation Registry

Regulatory obligations need owners, due dates, and proof. EntiHub acts as compliance master data—not a GRC suite replacement, but a governed register.

Why this is needed

Regulators expect ownership and evidence, not ad-hoc folders.
Framework sprawl (GDPR, DORA, NIS2) needs one inventory.
Status changes to “compliant” should be accountable.

Proposed entities in EntiHub

Governance settings

Setting	Recommended value	Why
`approvalRequired`	`true`	Compliant status needs accountable approval.
`historyEnabled`	`true`	Evidence history for external audit.
`allowSameAuthorApproval`	`false`	Maker/checker separation for sensitive changes.
`deletedRetentionDays`	`90` (or higher)	Soft-delete retention for auditability.

Entity definition (YAML sketch)

name: regulatory_obligation
displayName: Regulatory obligation
domain: Compliance
description: Regulatory obligation
version: "1.0.0"
approvalRequired: true
historyEnabled: true
deletedRetentionDays: 90
displayRefColumn: obligation_code
uniqueConstraints:
  - name: uq_regulatory_obligation_obligation_code
    columns: [obligation_code]
columns:
  - name: obligation_code
    dataType: string
    nullable: false
    maxLength: 64
  - name: framework
    dataType: string
    nullable: false
    maxLength: 32
  - name: title
    dataType: string
    nullable: false
    maxLength: 256
  - name: owner_team
    dataType: string
    nullable: false
    maxLength: 128
  - name: due_date
    dataType: date
    nullable: true
  - name: evidence_ref
    dataType: string
    nullable: true
    maxLength: 512
  - name: status
    dataType: string
    nullable: false
    maxLength: 16

YAML sketches

Sketches highlight the important fields and governance flags. Trim or extend columns to match your domain. See Setup Entity for the full YAML reference.

Sample data

obligation_code	framework	title	owner_team	due_date	status
REG-DORA-ICT	DORA	ICT risk management policy annual review	Risk	2026-11-30	open
REG-GDPR-ROPA	GDPR	RoPA update	Privacy	2026-10-15	in_progress

Benefits for the company

One inventory across frameworks.
Evidence indexed next to the obligation.
Clear owners for audit season.