Workflow Template

Compliance Attestation Workflow

Collects staff compliance attestations per campaign respondent, routes exceptions to a compliance reviewer for a remediation decision, tracks remediation actions to completion, and keeps status, table view and dashboard reporting current throughout.

Organisations running periodic compliance campaigns need a consistent, visible way to collect staff attestations, flag exceptions and follow them through to resolution, rather than relying on scattered emails and spreadsheets. This workflow creates an attestation record for each campaign respondent, emails them the declaration and response form, and routes any reported exception to a compliance reviewer for a remediation decision. Compliance owners, respondents, compliance reviewers and action owners are each brought into the process at the relevant stage, with record status, table views and dashboards kept current from creation through to completion or remediation.

Business Outcomes

Supports a consistent attestation process across every campaign and respondent
Helps compliance teams see exceptions and remediation status in one place via dashboards and table views
Reduces manual chasing by automatically emailing respondents and routing exceptions
Makes it easier to track remediation actions through to completion with recorded evidence
Keeps compliance owners informed automatically once remediation is confirmed

Workflow Steps

Steps

1
Create Attestation Recordcreate record
Creates the attestation record for this respondent when the campaign form is submitted.
2
Set Status to Sentupdate record
Marks the attestation record status as Sent before emailing the respondent.
3
Request Attestation from Respondentrequest external input
Emails the respondent the declaration and a form to record their compliance response, exception details and certification.
4
Persist Respondent Responseupdate record
Saves the respondent's compliance response and exception details onto the attestation record.
5
Route on Compliance Response
Routes the workflow depending on whether the respondent reported an exception.
compliance_response: "No exceptions"→Set Status to Complete
compliance_response: "Exception to report"→Set Status to Under Review
Default→Set Status to Under Review
6
Set Status to Completeupdate record
Marks the attestation as Complete because the respondent reported no exceptions.
7
Email Thank Yousend email
Sends the respondent a thank-you email confirming their attestation is complete.
8
Set Status to Under Reviewupdate record
Marks the attestation as Under Review because the respondent reported an exception.
9
Compliance Reviewer: Assess Exceptioncreate task
Assigns the compliance reviewer a task due in 5 days to decide whether remediation is required.
10
Save Reviewer Decisionupdate record
Persists the reviewer's remediation decision, actions and action owner to the record.
11
Route on Remediation Decision
Routes the workflow depending on whether the reviewer determined remediation is required.
remediation_decision: "No action needed"→Set Status to Complete
remediation_decision: "Remediation required"→Set Status to Remediation
Default→Set Status to Remediation
12
Set Status to Completeupdate record
Marks the attestation as Complete because no remediation action was needed.
13
Email Review Closedsend email
Notifies the respondent that the review is closed with no action required.
14
Set Status to Remediationupdate record
Marks the attestation as Remediation because remediation action is required.
15
Action Owner: Complete Remediationcreate task
Assigns the action owner a task with no due date to record completed remediation actions and upload evidence.
16
Save Remediation Completionupdate record
Persists the completed remediation actions and evidence to the record.
17
Set Status to Remediatedupdate record
Marks the attestation as Remediated now that remediation actions are complete.
18
Email Compliance Ownersend email
Notifies the compliance owner that the exception has been remediated.

Fields

Show all 17 fields

FormCompliance Attestation Campaign Setup

Compliance Owner Name*· Text
Compliance Owner Email*· Email
Campaign Name*· Text
Respondent Name*· Text
Respondent Email*· Email
Department*· Text
Declaration Text*· Long text

TaskCompliance Reviewer: Assess Exception

Remediation Decision*· Choice
Actions Required· Long text
Action Owner· Text

TaskAction Owner: Complete Remediation

Actions Completed· Long text
Evidence· File upload

Other fields

Attestation Status· Choice
Do you comply in full?*· Choice
Details of any exception· Long text
Comments· Long text
I certify my answers are true*· Checkbox

Compliance Owner Name*
Compliance Owner Email*
Campaign Name*
Respondent Name*
Respondent Email*
Department*

Forms

Compliance Attestation Campaign Setup

7 fields

Data Views

Attestations Overview

campaign_name, respondent_name, department, attestation_status

Dashboard Widgets

Attestations by Status

Recommended integrations

Setup the following integrations to extend workflow capability.

Send email in the workflow
AWS SES

compliance attestationemployee attestationcontrol attestationannual certificationcompliance declaration

Similar Workflows

Policy Acknowledgement Workflow Conflict of Interest Declaration Workflow Internal Audit Workflow

Similar Categories

Governance & Compliance

FAQs

What does this workflow record for each attestation?

Each attestation is a record with a reference number, a status such as Sent, Complete, Under Review, Remediation or Remediated, and a timeline of what happened. The respondent's compliance response, exception details and certification are saved to the record, as is the reviewer's remediation decision, actions required and action owner. When remediation is required, the completed actions and any uploaded evidence are also persisted to the record, so the full history is visible in one place.

Who is involved in the attestation process?

The compliance owner and respondent details are captured on the campaign request form that starts the workflow. The respondent completes the emailed declaration and response form, a compliance reviewer is assigned a task to assess any reported exception, and an action owner is assigned a task to complete and evidence any required remediation. Each participant takes part through their assigned task or emailed form, without needing an account.

What happens when a respondent reports an exception?

If the respondent answers that they have an exception to report, the attestation status is set to Under Review and a task is assigned to the compliance reviewer, due in 5 days, to record a remediation decision, any actions required and the action owner. If the respondent instead confirms full compliance, the record moves straight to Complete and a thank-you email is sent.

What happens after the compliance reviewer makes a decision?

The reviewer's remediation decision, required actions and action owner are saved to the record. If no action is needed, the status is set to Complete and the respondent is emailed to confirm the review is closed. If remediation is required, the status is set to Remediation and a task is assigned to the action owner to record completed actions and evidence.

How is remediation tracked to completion?

Once remediation is required, the action owner is assigned an open-ended task to record the actions completed and upload supporting evidence. This information is persisted to the record and the status is updated to Remediated, after which the compliance owner is emailed to confirm the exception has been resolved. The record's timeline and status keep this progress visible throughout.

How do we change the questions on the respondent or reviewer forms?

The forms and tasks in this workflow can be adjusted by describing the required change in plain English or by editing the relevant step directly in the workflow editor. This can be used, for example, to add a question to the respondent's declaration form or change the reviewer's decision options. Earlier versions of the workflow are kept, so changes can be reviewed against prior configurations.

Can the reviewer task due date or action owner task be adjusted?

Yes, the 5-day due date on the compliance reviewer's task and the open-ended action owner task can both be changed by editing the step in the workflow editor or by describing the change in plain English. This allows a workspace to tighten or extend review timeframes as its compliance process requires.

How is progress across campaigns and respondents monitored?

Table views and dashboards display attestation records by status, making it possible to see at a glance how many respondents are Sent, Complete, Under Review, in Remediation or Remediated. Workspace activity is logged throughout, giving compliance teams a consistent view across a campaign or across multiple campaigns and respondents.

Who can be assigned tasks within this workflow?

Tasks such as assessing an exception or completing remediation actions are assigned to workspace members, who may be set up as admins or members. Respondents and compliance owners take part through the public request form and emailed forms without needing a workspace account.

Does this workflow guarantee regulatory compliance?

This workflow records attestation statuses, respondent declarations, reviewer decisions and remediation evidence in a structured, auditable timeline on each record. Each business should confirm its own compliance obligations and how this recorded information supports them.

Ready to use this workflow?

Create a free account and customise this workflow for your business.