GRC (Preview)

Coming soon: Controls, Evidence, Tasks, Policies, and Reports.

• Controls: Define and track control ownership and implementation.
• Evidence: Link artifacts and attestations to controls.
• Tasks: Assign and schedule work for compliance readiness.
• Policies: Author, review, and version internal policies.
• Reports: Export status for audits and steering updates.

TODO (GRC): API routes, Prisma schema (control, evidence, task, artifact), role-based access, and workflow engine.