--- title: "DataXray Compass: posture dashboards and compliance reports" description: "Compass turns your DataXray index into posture dashboards, tracked issues, framework scorecards, and compliance reports, plus an agent that answers in charts." url: "https://www.dataxray.io/modules/compass/" language: "en-US" --- 1. [Home](https://www.dataxray.io/) 2. [Modules](https://www.dataxray.io/platform/) 3. Compass Modules / Compass # Map, track, and report your file risk The Compass module turns what DataXray has read into clear views of where sensitive files sit, how that changes over time, and which issues need work. Compliance, IT, and leadership work from the same numbers, and reports are ready for auditors. [Book a demo](https://www.dataxray.io/demo/) [All modules](https://www.dataxray.io/modules/) What it makes possible ## Decisions backed by evidence DataXray finds and classifies every file. The Compass module turns that into something a compliance team, an auditor, or a board can act on, and gives compliance and IT one set of numbers to work from. - Posture, issues, and history come from the DataXray index, dated and ready for an auditor, an assessor, or leadership, including CMMC and ITAR assessments. - See what's new since the last capture, what was resolved, and which data sources are getting worse. - The Compass module shows where owner, age, location, and content meet, such as old files owned by leavers, card numbers in a finance share, or personal data open to everyone. Compliance and IT ## One place for compliance and IT Compliance and risk teams read the posture dashboard, the issues, and the report. IT and data teams use scan operations and the Cube, Compass's free-form explorer, to decide where to act. Both work from the same captures, so they argue about what to do, not about whose number is right. How it works ## Views and reports over the same index Configured to how you work. Your policies, frameworks, severities, and saved views are set up around your teams. If you need a view or report Compass doesn't have yet, we can build it with you. - **Explore by dimension** Pick 2 or 3 dimensions, such as owner, age, label, or sharing, and see the estate as a table, heatmap, or folder tree. Click any cell to list its files, export them, or turn them into a DataXray smart label. - **Data posture at a glance** See how many files hold sensitive data and which categories they contain. See how that share has moved since the last capture, per datasource and across the estate. - **Change over time** The Compass module keeps a dated history of captures, so you can see what's new, what was resolved, and what's trending the wrong way. No file is read again to show it. - **Issues to work** Policies open an issue when a datasource holds data it shouldn't, such as card numbers or credentials in plain text. Each issue has a severity, an owner, and a status. - **Framework scorecards and reports** Group policies by framework (PCI DSS, GDPR, CPRA, GLBA, FTC Safeguards Rule, CMMC, and ITAR) and print a dated compliance report. Framework tags group your policies. They aren't a certification. - **Ask the Compass module agent** Ask in plain language which datasources hold the most card data, or what changed since last month. Answers come back as tables and charts, limited to the datasources you can access. Deployment and trust ## Compass never shows anyone more than DataXray does Compass installs as a sidecar inside your DataXray environment, one install per DataXray, and no data leaves that environment. People sign in with their own DataXray account, and Compass never shows anyone data they could not already see in DataXray. The agent is held to the same limit. Scheduled captures run under a read-only service identity, and analysis flows one way, from DataXray to Compass. The only write-back is a smart label you choose to create. ## Frequently asked questions ### What is DataXray Compass? Compass is the DataXray module for visualizing and reporting on your data. It gives you interactive views of the index, a data posture dashboard, tracked issues, framework scorecards, printable compliance reports, and an agent that answers in tables and charts. ### Do I need DataXray to use Compass? Yes. Compass is a DataXray module and works from the files DataXray has already read and classified. ### What is the difference between Compass and Cube? Compass is the module. Cube is its free-form explorer, one view alongside Posture, Issues, Operations, the compliance report, and the agent. ### Does Compass rescan my data to show trends? No. It keeps a dated history of captures from the DataXray index and compares them, so trends come from that history rather than from new scans. ### Which compliance frameworks does it cover? Suggested policies are tagged for PCI DSS, GDPR, CPRA, GLBA, FTC Safeguards, CMMC, and ITAR, and you can tag your own. Scorecards show how your policies stand, grouped by framework. They are not a certification of control coverage. ### Where does Compass run, and can it see data I cannot? It runs as a sidecar inside your DataXray environment, and data never leaves. It works with the signed-in user's own DataXray access, so it can never show anyone something they could not already see in DataXray. ### Can it be configured to our needs? Yes. Your policies, frameworks, severities, and views are set up around your teams, and we can build new views or reports with you. ### Does it run in air-gapped or classified environments? It runs wherever DataXray runs, including air-gapped networks. The other modules ## Built on every file DataXray has already read Modules extend the DataXray platform into the workflows customers ask for most. Each one runs on files DataXray has already read and classified, so no file is read twice. Every module is configured to fit how your team works. - **[AI Platform](https://www.dataxray.io/modules/ai-platform/)** Let AI assistants use your files safely, within each user's permissions. - **[Compass](https://www.dataxray.io/modules/compass/)** Explore what is in your data and build the taxonomy to govern it. - **[Curator](https://www.dataxray.io/modules/curator/)** Manage retention, disposition, and records capture, with every decision logged in a tamper-evident audit trail. - **[AutoFOIA](https://www.dataxray.io/modules/autofoia/)** Take FOIA and Privacy Act requests from intake to a redacted, Bates-numbered release. - **[eDiscovery](https://www.dataxray.io/modules/ediscovery/)** Review, redact, and produce documents for litigation, regulatory, and privacy requests without exporting them. **[Compass](https://www.dataxray.io/modules/compass/)** Explore what is in your data and build the taxonomy to govern it. [Learn more about modules](https://www.dataxray.io/modules/) ## In 30 minutes, see how DataXray reads what other tools only label [Book a demo](https://www.dataxray.io/demo/)