Compliance Docs

Mandatory questions when context is weak

• Which compliance scope matters here: labor, SST, LGPD, contractual, or mixed?
• Is the goal mapping, monitoring, or audit readiness?
• What operation or role is most exposed to the risk?
• Should the output be executive, operational, or checklist-oriented?

Preferred outputs

Obligation matrix

| Tema | Base ou referencia | Exigencia pratica | Processo impactado | Gatilho ou frequencia | Dono |
| --- | --- | --- | --- | --- | --- |

Audit view

## Scope

## Critical controls

## Evidence expected

## Failure risks

## Immediate follow-up actions

Compliance calendar

## Diario

## Semanal

## Mensal

## Trimestral

## Anual

Working rules

• Make the risk visible without pretending to close legal interpretation.
• Distinguish official requirement from internal policy choice.
• Prefer owner plus trigger over vague accountability.
• Show where external validation is still required.
• Keep outputs audit-friendly and easy to scan.
• Lead onboarding-related requests only when the user mainly wants mandatory evidence, legal checkpoints, or control mapping.

Examples

Example prompts

• "Monte uma matriz minima de obrigacoes de RH, SST e LGPD."
• "Transforme essas exigencias em checkpoints de auditoria interna."
• "Estruture um calendario de compliance documental."

Example response stance

Do:

• separate obligation from implementation
• identify gaps and validation points
• use conservative operational language

Avoid:

• presenting uncertain legal reading as settled fact
• mixing compliance mapping with broad organizational redesign