Integrity Actions

About integrity actions

It’s important to know that certain actions in Governance Studio cannot be edited or deleted. That’s because these actions are cryptographically signed and hashed at the moment you take them — and their permanence is what allows your compliance record to be independently verified by colleagues, partners, and regulators. These actions can be broadly categorized as integrity actions.

Additionally, many integrity actions appear in your exported report.

Therefore, when taking integrity actions, it’s important to remember:

• They’re permanent. Once submitted, the action can’t be undone.
• They may be shared. Certain actions may appear in artifacts shared beyond your immediate team.

This page specifically serves to inform:

1. What an integrity action is and why they are used
2. What integrity actions appear in an exported Governance Studio report

To learn more about integrity concepts, see CID, DID, and Verified in Key Concepts.

Integrity actions that become part of your Governance Studio report

Action	What this means for you
Creating a project	A project’s name and description cannot be edited after creation.
Creating a policy	A policy’s details and controls cannot be edited after creation.
Making a declaration or review	A declaration or review cannot be edited or deleted once submitted — including those generated automatically by indicators. All declarations and reviews associated with an applied policy appear in the report — as do the contributors who submitted them.
Uploading an attachment for a declaration or review	An attachment cannot be edited, deleted, or disassociated from the declaration or review it supports. It is downloadable by all project members in Governance Studio and is included in the report .zip.
Issuing a credential	A credential is a permanent, shareable artifact. It can be revoked or allowed to expire, but the fact that it was issued cannot be erased.