Five parts, one control library.

Controls, evidence, owners, risks and audits live in one place and point at each other. Change a control once and every framework it maps to sees the change.

01 / 05Datum · controls

Write each control once.

Your control library in your words, not ours, with its history kept. Every control carries its clause references, so “where is this used?” has an answer.

Harrow Freight/Controls

118 controls

ID	Control	Owner	State	Clauses
`PC-AC-04`	Quarterly access review	MB	Passing	8
`PC-AC-06`	Privileged access in AWS	RM	Passing	6
`PC-CM-03`	Production changes approved before merge	RM	Failing	6
`PC-HR-02`	Security awareness training	SB	In progress	9
`PC-HR-04`	Leaver access removed in two days	SB	Passing	7
`PC-CR-01`	Encryption at rest	OA	Passing	8
`PC-VR-01`	Vendor security review	GN	Passing	10
`PC-AI-01`	Route-planning model inventory	RM	Passing	3

02 / 05Chain · evidence

Evidence from the systems that hold it.

Pulled on a schedule, dated, attached once and counted under every clause its control maps to. What can’t be pulled gets an owner and a due date.

AWS · Google Cloud · Microsoft Azure · Okta · Google Workspace · Microsoft Entra ID · GitHub · GitLab · Jira · Workday · BambooHR · Rippling · Jamf · Kandji, and 26 more.

Harrow Freight/Evidence

Last 7 days

Q2 access review sign-off, production
14 Jul 15:20
Manual · PC-AC-04
counts under 8
User export, Q2
1 Jul 09:12
Okta · PC-AC-04
counts under 8
Credential report
1 Jul 09:14
AWS IAM · PC-AC-04, PC-AC-06
counts under 14
Leavers, June
1 Jul 07:00
Workday · PC-HR-04
counts under 7
Disk encryption, 1,212 devices
1 Jul 05:00
Jamf · PC-EP-01
counts under 6
Branch protection, 41 repositories
30 Jun 18:02
GitHub · PC-CM-03
counts under 6
2-step verification enforcement
1 Jul 06:30
Google Workspace · PC-AC-02
counts under 8

03 / 05Witness · owners

A name on every control.

One owner signs for each control, and the sign-off is dated. When an owner leaves, their controls are listed the same day.

Harrow Freight/Owners

8 owners · 118 controls

RMRavi Menon · Head of Engineering261 due
MBMarcus Bell · IT Operations Lead22Signed
OAOwen Achterberg · Security Engineer212 due
DODana Okafor · Director of Compliance14Signed
SBSofia Brandt · People Operations Lead121 due
LFLeah Fontaine · Warehouse Systems Manager9Signed
GNGrace Nwosu · Vendor Manager8Signed
TKTom Keller · Finance Systems Lead6Signed

04 / 05Tolerance · risks

Risks tied to the controls that treat them.

Scored before and after their controls. If a control fails, its risks show their old score again.

Harrow Freight/Risks

Scored of 25

RSK-031
Ransomware on dispatch systems
Treated by PC-BC-01, PC-VM-02, PC-EP-01
20 → 10
RSK-009
Unpatched depot handheld devices
Treated by PC-AC-09, PC-VM-02
16 → 9
RSK-022
Carrier with TMS access is breached
Treated by PC-VR-01, PC-AC-06
15 → 8
RSK-017
Former staff retain production access
Treated by PC-AC-04, PC-HR-04
12 → 4
RSK-004
Loss of reefer temperature telemetry
Treated by PC-LG-01, PC-BC-01
12 → 6

05 / 05Transit · audits

Every request, tracked to the answer.

Requests from auditors and from customers’ security teams arrive in one queue, each showing the controls it touches, the evidence that already answers it, and what’s missing. Most are answered within a day.

How audits run on Precept

Supporting feature · Closure, readiness count

How many controls would hold today.

Inside Transit, Closure counts the in-scope controls with current evidence and a named owner, for each framework. It isn’t a score we invent; it’s a count you can open.

Harrow Freight/Transit

Fieldwork · week of 13 Jul

Request	Asked for	From	Received	State
`REQ-2291`	Q2 access reviews, all in-scope systems	Auditor	`Tue 10:40`	Sent Thu 12:15
`REQ-2292`	Change sample: 25 production changes	Auditor	`Tue 11:02`	19 of 25
`SQ-0418`	Security questionnaire, 212 questions	Fenwick Grocers	`Wed 08:45`	188 of 212
`REQ-2294`	Incident response tabletop record	Auditor	`Wed 09:30`	Sent Wed 14:10
`REQ-2296`	Backup restore test, Q2	Auditor	`Thu 09:05`	Evidence due 20 Jul
`REQ-2288`	Background checks, new hires	Auditor	`Mon 16:20`	Sent Tue 09:05

Harrow Freight/Transit/Closure

Thu 16 Jul 2026, 12:15

All controls109 of 118 · 6 ◧ · 3 □
SOC 290 of 96 · 4 ◧ · 2 □
ISO 2700196 of 104 · 5 ◧ · 3 □
NIST CSF 2.084 of 88 · 3 ◧ · 1 □

Four supporting features.

Not parts of their own. Each works across the five parts above.

Tie-in the crosswalk: Shows how much of the next framework your controls already answer.
Baseline spreadsheet import: Reads your existing control spreadsheet into Datum on day one.
Survey control matrix: Every control against every framework, on one screen.
Closure readiness count: How many in-scope controls would hold if fieldwork started today. Shown inside Transit.

Five parts, one control library.Five parts, one control library.