Question 1

What is a Compliance Health Score?

Accepted Answer

A Compliance Health Score is a structured 0-100 rating of your organization's regulatory posture across eight compliance domains: data inventory, consent and disclosure, data subject rights, vendor management, security controls, incident response, regulatory awareness, and governance. It surfaces gaps before they become enforcement issues.

Question 2

How is the score calculated?

Accepted Answer

Each of 40 questions across 8 categories is scored: Yes = 2 points, Partially = 1 point, No = 0 points. The maximum raw score is 80 points, normalized to a 0–100 scale. Category scores are shown separately in the full breakdown — emailed to you after the assessment.

Question 3

Is this a legal opinion or a certified audit?

Accepted Answer

No. The Compliance Health Score is a self-assessment tool that surfaces likely gaps based on your answers. It is not legal advice, a SOC 2 certification, a GDPR audit, or any other formal attestation. Use it as a starting point — confirm your specific situation with qualified legal counsel.

Question 4

Which privacy and compliance laws does this cover?

Accepted Answer

The assessment draws on principles from GDPR, CCPA/CPRA, HIPAA, SOC 2, ISO 27001, FinCEN AML requirements, and NIST 800-53. Questions are designed to surface gaps that are relevant across most modern data-handling businesses — not just regulated industries.

Question 5

What does LexAudit do after I complete the assessment?

Accepted Answer

After you enter your email, we send your full category breakdown and your top 3 priority gaps — the specific areas where your score indicates the highest regulatory exposure. We also show you how LexAudit Monitor can track regulatory drift in those areas on a continuous basis.

Question 6

How is this different from the compliance monitoring decision tree?

Accepted Answer

The 5-question decision tree at /decision-tree screens whether continuous monitoring or a one-off audit is appropriate for your situation. This 40-question assessment goes deeper — it maps your actual posture across 8 compliance domains and identifies where specific gaps exist, regardless of which monitoring cadence is right for you.

What is your compliance health score?

Do you maintain a current inventory of all personal data you collect?