Compliance Reports

An overview of Compliance Reports

The Compliance Reports area is a new addition to the Platform Hub, designed to transform raw audit data into actionable insights.

While you can already access granular logs via the Audit tab or integrate with SIEM tools using the audit stream, Compliance Reports streamline reporting for Governance, Risk, and Compliance (GRC) teams.

Compliance Reports provide a centralized, audit-ready visibility into your software delivery lifecycle. They are designed to help Governance, Risk, and Compliance (GRC) teams quickly verify security controls and maintain a clear trail of deployment activity across your entire instance.

Compliance reports are currently in Alpha. If you encounter any issues, please contact our support team.

Our reports focus on answering two critical questions:

  1. Deployment Permissions: Which users are authorized to deploy specific projects, and to which environments?
  2. Production Deployments: Who initiated deployments to Production, and when did those events occur?

The Production Deployments report is coming soon.

Deployment Permissions

The Deployment Permissions report provides a comprehensive map of access across your instance, allowing you to audit which users possess the authority to trigger deployments. By cross-referencing user roles with specific projects and environments, this report helps GRC teams validate that the principle of least privilege is being enforced and ensure that only authorized personnel can deploy.

Running the report

To run the Deployment Permissions report, navigate to Platform Hub -> Reports, and choose the Deployment Permissions card:

The Compliance reports page where users select a report to run

Select one or more environments from your Octopus Spaces to view Deployment permissions for:

The environment selector for the deployments permission report

Finally, click on the Create Report button and view the projects for the selected environments, and the users that can deploy to each project in that environment:

The deployments permission report once it has been run

You can expand each project to see a list of the users that have permissions to deploy to that environment. You can also click the Download CSV button to generate a CSV file of the executed report.

Production Deployments

Development of the Production Deployments report is currently being planned.

This report is designed to provide a definitive audit trail of all activity within your most sensitive environments. It will offer a streamlined view of who initiated changes to Production and precisely when they occurred, facilitating effortless point-in-time compliance reviews.

Feedback

We’d love to get feedback on what reports you need to make compliance easier!

Help us continuously improve

Please let us know if you have any feedback about this page.

Send feedback

Page updated on Wednesday, January 21, 2026