Initial commit for compliance reports in Platform Hub

src/pages/docs/platform-hub/compliance-reports.md

@@ -0,0 +1,69 @@
+---
+layout: src/layouts/Default.astro
+pubDate: 2026-01-21
+modDate: 2026-01-21
+title: Compliance Reports
+subtitle: An overview of Compliance Reports
+icon: fa-solid fa-shield-halved
+navTitle: Compliance Reports
+navSection: Platform Hub
+description: An overview of Compliance Reports in Platform Hub
+navOrder: 170
+---
+
+The Compliance Reports area is a new addition to the Platform Hub, designed to transform raw audit data into actionable insights.
+
+While you can already access granular logs via the [Audit](/docs/security/users-and-teams/auditing) tab or integrate with SIEM tools using the [audit stream](/docs/security/users-and-teams/auditing/audit-stream), Compliance Reports streamline reporting for Governance, Risk, and Compliance (GRC) teams.
+
+Compliance Reports provide a centralized, audit-ready visibility into your software delivery lifecycle. They are designed to help Governance, Risk, and Compliance (GRC) teams quickly verify security controls and maintain a clear trail of deployment activity across your entire instance.
+
+:::div{.hint}
+Compliance reports are currently in Alpha. If you encounter any issues, please contact our [support team](https://octopus.com/support).
+:::
+
+Our reports focus on answering two critical questions:
+
+1. **Deployment Permissions**: Which users are authorized to deploy specific projects, and to which environments?
+2. **Production Deployments**: Who initiated deployments to Production, and when did those events occur?
+
+:::div{.hint}
+The **Production Deployments** report is coming soon.
+:::
+
+## Deployment Permissions
+
+The Deployment Permissions report provides a comprehensive map of access across your instance, allowing you to audit which users possess the authority to trigger deployments. By cross-referencing user roles with specific projects and environments, this report helps GRC teams validate that the principle of least privilege is being enforced and ensure that only authorized personnel can deploy.
+
+### Running the report
+
+To run the Deployment Permissions report, navigate to **Platform Hub -> Reports**, and choose the **Deployment Permissions** card:
+
+:::figure
+![The Compliance reports page where users select a report to run](/docs/img/platform-hub/compliance/compliance-reports-tiles.png)
+:::
+
+Select one or more environments from your Octopus Spaces to view Deployment permissions for:
+
+:::figure
+![The environment selector for the deployments permission report](/docs/img/platform-hub/compliance/deployment-permissions-report-choose-envs.png)
+:::
+
+Finally, click on the **Create Report** button and view the projects for the selected environments, and the users that can deploy to each project in that environment:
+
+:::figure
+![The deployments permission report once it has been run](/docs/img/platform-hub/compliance/deployment-permissions-report-executed.png)
+:::
+
+You can expand each project to see a list of the users that have permissions to deploy to that environment. You can also click the **Download CSV** button to generate a CSV file of the executed report.
+
+## Production Deployments
+
+:::div{.hint}
+Development of the Production Deployments report is currently being planned.
+:::
+
+This report is designed to provide a definitive audit trail of all activity within your most sensitive environments. It will offer a streamlined view of who initiated changes to Production and precisely when they occurred, facilitating effortless point-in-time compliance reviews.
+
+## Feedback
+
+We'd love to get [feedback on what reports you need](https://roadmap.octopus.com/submit-idea) to make compliance easier!