# Prove continuous compliance

Compliance is usually a snapshot: a report assembled for an audit, accurate the
day it's produced and drifting from that moment on. Axiad Mesh treats it as a
**live measurement** instead — your posture against a framework is a number that
updates as your environment changes, so you can prove where you stand today and
show movement over time.

## Policies that evaluate continuously

Mesh evaluates your identities and assets against [policies](../concepts/policies.md)
— the rules that define what's acceptable, from cryptographic algorithm choices to
identity-hygiene expectations. Evaluation runs continuously: when an asset changes
and on a regular schedule, so a violation is caught as it appears and clears on its
own once it's fixed. The result is a posture that reflects reality now, not the
last time someone ran a scan.

## Roll policies up into frameworks

Individual violations are hard to report on; a **framework** makes them
board-ready. Policies group into a named framework — for example a NIST
post-quantum baseline — that gives each asset a **compliance percentage** and a
severity band, so you can see not just individual gaps but how far along a whole
standard you are. One framework is active per category at a time, so you get a
single authoritative score to report rather than competing ones.

## See it, and share it

The **Audit & Compliance** [persona workspace](../user-guide/generative-ui.md#persona-workspaces)
composes this into a view built for exactly this conversation: framework coverage,
a control-coverage heatmap, and a cyber-insurance readiness score. It's the
picture you hand to an auditor, a regulator, or an insurer — and because it reads
live data, it's current every time you open it.

![An Audit & Compliance workspace in Axiad Mesh Generative UI, with a control-coverage heatmap scoring MITRE, PCI-DSS, NIST, and ISO across authentication, authorization, non-human, and privileged controls, and a cyber-insurance readiness score of 92 percent weighted across six pillars](/img/generative-ui/audit-compliance-workspace.png)

## Show movement, backed by an audit trail

Continuous measurement is what lets you show *movement* — a coverage percentage
climbing quarter over quarter as remediation lands — instead of a flat attestation.
And every action behind that movement is recorded: Mesh keeps an
[audit log](../admin-guide/audit-logging.md) of what changed, so the story you tell
an auditor is backed by evidence rather than assertion.

## Related

- [Policies](../concepts/policies.md) — the rules and frameworks behind the score.
- [Achieve post-quantum readiness](./crypto-agility.md) — the most developed
  compliance surface today.
- [Audit logging](../admin-guide/audit-logging.md) — the evidence trail.
- [Generative UI](../user-guide/generative-ui.md) — the Audit & Compliance
  workspace.