> For the complete documentation index, see [llms.txt](https://docs.cortex.aic.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cortex.aic.io/menu-areas/assurance-and-governance.md).

# Assurance and Governance

Use this menu group to inspect retained activity and control how CORTEX records are protected, kept, corrected, and shared. These actions can affect important evidence. Open the exact record and read the current state before you save a change.

| Menu item                   | First action                                                       | What you use it for                                                                                                                                  |
| --------------------------- | ------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Pulse & audit**           | **Refresh Pulse**                                                  | Inspect activity, indicators, and audit evidence. The page heading is **Pulse**. It also links to **My indicator watches** and **Audit inspection**. |
| **Shield sanitisation**     | Select a product and **Preview literal removal**.                  | Make a new literal-sanitized draft for review. The original remains unchanged.                                                                       |
| **Preservation & archive**  | Select a record kind and stable ID, then **Inspect preservation**. | Check preservation, retention, holds, and archive state. Authorized actions use **Save governance action**.                                          |
| **Custody transfers**       | **Prepare custody transfer**                                       | Offer exact record custody to another authorized holder.                                                                                             |
| **Received custody offers** | Open an offer in the inbox.                                        | Inspect and decide on incoming custody.                                                                                                              |
| **UK source register**      | **Register source metadata**                                       | Keep the UK source and guidance inventory. **Import draft catalogue** and **UK applicability profiles** are related tasks.                           |
| **System assurance**        | **Register system baseline**                                       | Record controls, deployments, evidence, and data paths.                                                                                              |
| **Processing activities**   | **Register processing activity**                                   | Record a processing purpose and privacy applicability.                                                                                               |
| **AI use cases**            | **Register AI use case**                                           | Record an AI use, data purpose, evaluation, and decision.                                                                                            |
| **Rights requests**         | **Register rights request**                                        | Retain a request, the checks, and response evidence.                                                                                                 |
| **Security incidents**      | **Report an incident**                                             | Record a defensive incident and its follow-up. **Contract reporting rules** is a related page.                                                       |

Some actions appear in **Tasks**. The application shows them only when your account has the right permission and the record is in a valid state.

## Check an exact record

{% stepper %}
{% step %}

### Select the record location

Select the menu item that holds the record.
{% endstep %}

{% step %}

### Open the exact record

Use the page search or record selector to open the exact ID and version.
{% endstep %}

{% step %}

### Review the current state

Read the protective marking, restrictions, status, owner, and history.
{% endstep %}

{% step %}

### Take the allowed action

Select the allowed next action. Enter the required reason and references.
{% endstep %}

{% step %}

### Save and verify

Save once. Refresh the record and check the new state and retained history.
{% endstep %}
{% endstepper %}

For archive and retention, see [preservation](/workflow-guides/assurance/governance.md) and [retention review](/workflow-guides/assurance/retention.md). For custody, see [custody transfer](/workflow-guides/assurance/custody-transfer.md). For records that support legal or organizational duties, see [processing activities](/workflow-guides/assurance/processing-activities.md), [rights requests](/workflow-guides/assurance/rights-cases.md), [AI use cases](/workflow-guides/assurance/ai-governance.md), [system assurance](/workflow-guides/assurance/system-assurance.md), and [security incidents](/workflow-guides/assurance/security.md).

{% hint style="info" %}
**Pulse & audit** can show that a person read a record. A read mark does not approve work and does not acknowledge a release. Use the approval or acknowledgement action on the exact workflow page.
{% endhint %}