Risk management and compliance platform

A multi-tenant SaaS web platform for regulatory compliance: asset and activity inventory, risk analysis, treatment plans, security controls, document management and reporting.

It is used by compliance teams, security officers and consultants from organizations in many sectors. I worked on the admin SPA.

Bring together everything a company needs to prove compliance with privacy and security regulations (GDPR-style rules or information security standards): which assets and data it holds, what risks affect them, which measures it applies and how they evolve.

On the UI side, the challenge was presenting large volumes of interrelated data clearly: assets, risks and controls.

• Dashboard with interactive charts that link to pre-filtered detail screens.
• Interactive asset dependency graph and Gantt chart for action plans.
• Export of risk and treatment reports, with a choice of report type.
• Mapping of equivalent controls across different regulatory frameworks.
• Date and status validation for tracking objectives and actions.
• Pagination and filters in lists and modals, plus visual unification of components (UX/UI refactor).

• Fixed a listener that triggered infinite API calls when creating entities.
• Fixed the impact assessment view, which mixed grouped and ungrouped assets.

Angular SPA organized into feature modules, with a core layer (services, interceptors, guards) and shared components, consuming a REST API.

Still in production; client companies use it as internal software.

Angular, RxJS and async patterns; working on a large codebase with years of history; data visualization with charts, graphs and Gantt diagrams.