To mark individual controls as default-pass or default-fail, edit them in the Catalog page and set the "Default Compliance" field. Controls without a Default Compliance value will always remain as Manual Review.

When enabled, software with vulnerabilities, 5+ device installs, or EOL status will be automatically registered as compliance zones. When disabled, all auto-discovered software zones are removed (agent-discovered devices are not affected). The manual "Sync to Zones" button on Endpoint Security still works regardless of this setting.

Requires the organization to have a logo uploaded above. When enabled, members of this org will see the org logo instead of TATER branding throughout the application.

When enabled, OrgAdmins of this organization can see billing and fee columns in compliance roadmaps, access white-label branding controls, and manage licensing settings for client organizations.

Periodically certify user access across your organization. Create campaigns to review and approve or deny user access.

Track and assess third-party vendors, their risk profiles, compliance certifications, and assessment status.

Track the recurring oversight meetings your compliance program requires — security threat review, management review, access review, change advisory board, vendor review, incident review, BCP/DR, training, policy. Each meeting maps to the SOC 2 / ISO 27001 control it evidences; TATER tells you when one is due or overdue and keeps the attendee list, agenda, minutes, and decisions as audit evidence.

Inventory every AI system you use, classify it under the EU AI Act, and track your ISO 42001 / NIST AI RMF / EU AI Act control posture. The hottest 2026 compliance category — and TATER speaks AI natively.

Identify, assess, and track organizational risks with linked controls and vendors.

Manage control exceptions and waivers with formal approval workflows and automatic expiration.

Track framework updates, version changes, and their impact on your compliance posture.

Approval workflow for High and Critical impact control changes. Low/Medium changes are auto-approved.

Your client audit engagements. Connect Claude to TATER's MCP and hand it a client's evidence files — Claude reads each file and records it as evidence mapped to the SOC 2 Trust Services Criteria. Track coverage, fill gaps, and write workpapers. Works whether or not the client is a TATER customer.

Plan, execute, and track internal and external audits with findings and corrective action plans.

Content Provenance Audit

Audit catalog control text for CIS-derived language. Heuristic checks identify which controls need rewriting in TATER's voice for commercial licensing independence (ADO #401). Set CIS_REFERENCE_CORPUS_PATH on the Function App to enable verbatim n-gram matching against a local CIS corpus.

TATER Setup

A guided checklist for getting TATER configured for your tenant. Items adapt to your Microsoft cloud tier, MSP status, and integrations. Progress saves automatically; finishing the list earns the Fully Onboarded achievement.

Azure resource security posture from Defender for Cloud assessments

Integration Marketplace

Connect TATER to your existing tools and automate notifications

Notification Rules

Configuration Documentation

Versioned reference docs for configurations, architecture decisions, and operational procedures - linked to controls, frameworks, and change records.

Business Continuity and Disaster Recovery plan library. Track plans, tests, recovery objectives, and system criticality.

Plan of Action & Milestones - track and remediate DoD/NIST findings to closure. Help ↑

NIST Risk Management Framework - track each system through the 6-step ATO lifecycle (Categorize → Select → Implement → Assess → Authorize → Monitor).

System Security Plan documents - author per-control implementation statements, AI-assist drafts, export to OSCAL JSON or Word .docx for federal authorization packages.

Data inventory, processing activities (GDPR Article 30), and privacy impact assessments.

Track security awareness training campaigns, phishing simulations, and per-user completion.

Schedule and track periodic control testing. Record test execution results and evidence collection.

Track tasks, incidents, findings, and action items arising from compliance work.

TATER Calendar

Unified timeline - GRC due dates, compliance roadmap phases, scan schedules, access reviews, control tests, and more.

In Outlook: File → Account Settings → Internet Calendars → New. In Apple Calendar: File → New Calendar Subscription. Events refresh approximately every hour.

Share ideas, vote on feature requests, and see what is planned.

Monitor identity-based threats: impossible travel, MFA bypass, token theft, brute force, and anomalous sign-in patterns.

Unified security posture across AWS, GCP, and Azure cloud environments.

AI-powered compliance assistant - ask questions, get remediation guidance, draft policies, and analyze scan results.

TATER AI Compliance Analyst

I can read your scan results, analyze compliance findings, create risk acceptances, add evidence, assign controls to team members, and trigger remediations.

Use the suggested prompts above or tell me what you need to work on.

Autonomous agent that navigates admin portals to collect evidence for Manual Review controls. Requires TATER Agent installed on a desktop machine.

Get Started - Implementation Progress

Tracks your TATER configuration end-to-end. Status is detected automatically from system data - finish each step to unlock the full feature set and earn organization achievements.

TATERpedia SHARED

A Wikipedia-style wiki shared across all TATER organizations. Pages cover controls, applications, frameworks, and free-form troubleshooting / diagnostic / remediation topics. Edited by any Auditor+ in any org. Content must be generic - for org-specific configuration use Configuration Documentation, for org-specific decisions use Comments threads.

Schedule manual configuration collection tasks for devices that cannot be automatically scanned - firewalls, switches, routers, and more.

Clients

Licensing

Usage Analytics

Feature usage analytics for your organization. SuperAdmins also see cross-tenant traffic, referrers, and per-org breakdown.

Subscription Management

Manage all client and MSP subscriptions, billing contacts, seat limits, and renewal dates.

MCP Feedback

Every MCP feedback submission across all orgs. Negative entries auto-file ADO bugs and link to the work item. Use to spot pain points and validate fixes.

TATER Tips

A growing library of bite-sized tips covering every TATER capability - each one links you straight to the page it describes. Search, filter by category or difficulty, or just browse.

Implementation Guides

Curated step-by-step guides for common security initiatives - Conditional Access for compliant devices, MFA rollout, DMARC enforcement, BitLocker, PIM for admins, and more. Each guide includes prerequisites, ordered steps with verification criteria, rollback notes, and links to the controls and frameworks they advance. Track completion per organization.

Security Posture

Composite security score across compliance, vulnerabilities, identity threats, and risk acceptance.

Audit Snapshots

Point-in-time compliance freezes for audit periods - lock a snapshot to prevent changes during auditor review.

Auditor Access

Generate expiring read-only access tokens for external auditors - no account required.

Report Distribution

Schedule automated compliance report emails to stakeholders. Requires SMTP configured in Integrations. For the full report catalog with XLSX/PDF export, custom datasets, and recurring delivery, use TATER Insights › Scheduled Reports ↗.