The [Compliance](https://humadroid.io/posts/compliance-and-governance-guide/) tab is available only for paid accounts. If you’re managing frameworks like ISO 27001 or SOC 2, or you need to maintain an audit-ready internal control system, this is your go-to setup.

## **Compliance Settings Overview**

### **Risk Categories**

Define what risks your company tracks – and how they’re grouped.

Humadroid comes with a set of system default risk categories. These are grouped by area (e.g., Compliance, Contractual, External) and include:

* Clear descriptions of the risk type

* Examples of common threats or violations

* Tags to help with classification

#### **Default risk categories**

![Default compliance risk categories in Humadroid including contractual, legal, and regulatory risks](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBYQT09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--84700ea72aa0c672a23d6c299741f6ef799ddd8e/Compliance-risk-categories-in-Humadroid--E2-80-93-system-default-view-1-scaled.jpg)

*System default risk categories grouped by type: compliance, legal, contractual, and regulatory. Each includes examples to help with classification.*

You can use these predefined categories out of the box or create your own, aligned with your structure, teams, or departments.

> 💡 Example: Create a custom “IT Operational Risk” category if you’re tracking system downtimes or vendor SLA breaches separately.

#### **Creating a new risk category**

![Form for adding a new custom risk category in Humadroid with name, identifier, parent category, and examples ](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBXQT09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--14679fc189a71f6dbdf6d916735ba0ef338a9028/Creating-a-new-custom-risk-category-in-Humadroid--scaled.jpg)

*Define your own risk categories with custom identifiers, color codes, and classification examples tailored to your organization.*

### **Scoring Methods**

Decide *how* you evaluate and prioritize risks.

In this section, you manage risk scoring models that help determine the criticality of each risk. Three default methods are available:

* **Multi-Impact Assessment**  
  Uses a weighted formula based on financial, legal, and reputational impact.

* **Simple 5×5 Risk Matrix**  
  A straightforward model using probability × impact.

* **Weighted Impact Assessment**  
  A nuanced model allowing additional types of impact (e.g., operational).

#### **Available risk scoring methods**

![List of default risk scoring methods in Humadroid including Multi-Impact Assessment, 5x5 Risk Matrix, and Weighted Impact Assessment.](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBXUT09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ec6b59f42171ae5b36aef5bea08c94842425b2c3/List-of-default-risk-scoring-methods-in-Humadroid-including-Multi-Impact-Assessment-5x5-Risk-Matrix-and-Weighted-Impact-Assessment-scaled.jpg)

*Choose from predefined scoring models like Multi-Impact Assessment or create your own to align with your organization’s risk evaluation framework.*

Each model comes with editable treatment thresholds (when a risk becomes significant) and customizable weights. You can also create new methods based on your internal evaluation criteria.

> 📎 **Recommended**: In our internal compliance, we're using this method with a higher threshold - it allows us to focus on really important risks and leave a track of those of lesser impact.

#### **Custom risk scoring method setup**

![Form for creating a new risk scoring method in Humadroid with custom formulas, treatment thresholds, and impact calculations.](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBXdz09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--edbeb9340680c3c21be1cd421913a2d6874f6287/Creating-a-custom-risk-scoring-method-in-Humadroid-scaled.jpg)

*Build your own risk scoring method using custom thresholds and impact-based formulas. Ideal for tailoring your compliance evaluation to specific frameworks.*

### **Employment Types**

n Humadroid, **Employment Types** help you enforce compliance by ensuring the right documents are linked to the right roles. Whether it’s full-time staff, contractors, or interns, each type can have specific policies automatically assigned, such as:

* Code of Conduct

* NDA

* Security or Data Protection Policies

This ensures that **every person acknowledges the right set of documents** based on their role, with no manual chasing.

👉 Full guide: [Employment Types in Humadroid →](https://chat.humadroid.io/hc/humadroid-help-center/articles/1748260391-employment-types-in-humadroid)

#### **Employment types overview**

#### **Creating a new employment type**

![Form for adding a new employment type in Humadroid with required documents and activation toggle](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBWdz09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--922c7d54e3c17199b420d13e06f01798d2a9da8a/Creating-a-new-employment-type-in-Humadroid-scaled.jpg)

*Create a custom employment type and link it to required documents like Code of Conduct or Security Policy. Documents will be auto-assigned to users based on their role.*

## **Advanced Asset Management (Assets Settings)**

Once Compliance is enabled, you’ll also get access to advanced asset tracking features, so let’s break up how to navigate through Assets settings.

### **Lifecycle States**

Here, you define and manage equipment lifecycle stages from the beginning, from purchasing to disposal.

Humadroid provides a set of default states:

* Ordered

* Received

* In Stock

* Deployed  
  …and more.

#### **You can edit these or create your own.**

#### **Adding a new lifecycle state, by clicking "Add New State"**

![Form for creating a new asset lifecycle state in Humadroid with name, description, terminal status, and custom fields](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBYUT09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--78fc03c8ed7d93f08bfc790f0fca59da4ab7132c/Creating-a-new-asset-lifecycle-state-in-Humadroid-scaled.jpg)

*Add custom asset states to match your internal workflows. Use terminal states to define endpoints like “Retired” or “Disposed”.*

#### **Lifecycle view with state transitions**

![Asset lifecycle flow diagram in Humadroid showing transitions between states like Ordered, Received, In Stock, Deployed, and Under Repair](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBYZz09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--13c6938b043b3d6034d18b461259a6ab7c0bc6df/Asset-lifecycle-flow-diagram-in-Humadroid-scaled.jpg)

*Visualize asset state transitions using a flow diagram. Customize each state and its valid paths to reflect your real-world lifecycle management.*

✏️ Pro tip: Use custom transitions to enforce rules like “you can’t deploy before receiving.”

### **Categories**

Organize your hardware and equipment into categories like *laptops*, *phones*, and *monitors*.

While creating a category, you can:

* Choose a parent category

* Set default lifecycle duration

* Select the depreciation method

* Flag items for regular maintenance

#### **Asset category list**

![List of asset categories in Humadroid including laptops, cameras, mobile phones, and monitors with depreciation status](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBYdz09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ead37b2b2fbaeb6dad55f8281fe65746156dc472/Asset-categories-view-in-Humadroid-asset-management-scaled.jpg)

*Categorize company assets for easier tracking and reporting. Each category can include depreciation settings and asset counts.*

#### **Creating a new asset category**

![Form for creating a new asset category in Humadroid with lifecycle settings, depreciation, maintenance interval, and custom fields.](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBZQT09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f937f6a152b83cc145c3acad13691ffa69f7c87f/Creating-a-new-asset-category-in-Humadroid-scaled.jpg)

*Define asset categories with lifecycle duration, depreciation settings, and maintenance reminders. Add custom fields to track additional metadata.*

### **Departments**

Use this to assign assets to teams or cost centers. See how much hardware is tied to Sales, Marketing, or IT.

#### **Department overview with assigned assets**

![Departments view in Humadroid showing Accounting and Engineering with assigned managers and asset counts ](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBZdz09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--5e0b89cebc6f30aac3c1f886d9adf349cb45837c/Asset-departments-management-in-Humadroid-scaled.jpg)

*Assign assets to specific departments and track inventory by team.*

### **Locations**

Track asset distribution across your offices, warehouses, or regions.

#### **Asset location structure**

![Asset locations view in Humadroid showing Germany with Berlin and Poland with Poznań as sub-locations](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBZUT09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--32155dca5e2cd8eea6835777188bfe6faa841947/Asset-location-hierarchy-in-Humadroid-scaled.jpg)

*Organize assets across geographic locations with sub-location support. Ideal for multi-office inventory visibility and compliance traceability.*

## **📄 Document Management**

Humadroid also enables centralized document control – a crucial piece for ISO/SOC 2 audits.

You can:

* Upload and manage internal policies, procedures, controls

* Assign ownership and version history

* Link documents to risks, assessments, or assets

* Request acknowledgment from employees (e.g., policy sign-off)

This feature does not require setting up in settings. Under Compliance -> Documents, you can start create your documents as you go.

#### **Compliance documents with acknowledgment tracking**

![Document dashboard in Humadroid showing compliance policies with versioning, acknowledgment status, and update dates](http://chat.humadroid.dev/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBZZz09IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--7e5af5655c3d2ca5a6e695eb183929e2982de019/Compliance-document-management-dashboard-in-Humadroid-scaled.jpg)

*Manage all compliance documents in one place. Track versions, statuses, acknowledgment progress, and link policies to roles or users.*