Recomputes coverage and gap arithmetic from declared values. It does not read the SOC report, does not assess whether any control is effective, and is not an audit opinion. You declare the report type, period, opinion type and exception count, your fiscal year-end and an as-of date, each complementary user entity control id with your mapped control id (or none), and each subservice organisation as carved out or inclusive. The tool returns the uncovered control ids, whether the period covers the year-end, the bridge gap in whole days, and the carved-out organisations that need their own report. Ids and dates only: no free text is accepted or echoed.
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data, use synthetic or anonymised inputs only.
Inputs
Ids are lowercase letters, digits, hyphen or the low-line character, up to 32 characters. An email-like or name-like value is refused.
Result
Execution Hash (SHA-256)
execution_hash,
Basis and declarations
Every figure is arithmetic on the values you declare. The tool does not open a report, does not decide which user controls are complementary, and does not judge whether a mapped control addresses the stated need or operates effectively. A control id counts as covered when you declare a mapped control id for it, nothing more.
The bridge gap is the whole number of days from the declared period end to the declared fiscal year-end, and zero when the period already covers the year-end or ends after it. A type 1 report describes a single point in time and is flagged rather than treated as operating coverage.
A missing required fact returns INDETERMINATE and is never guessed. Impossible calendar dates, malformed ids and unknown enumerated values are refused with an explicit code. Dates use the proleptic Gregorian calendar with no time zone or locale handling.