Compliance dashboard — credentials, Self-ID, and audits

Workforce → Compliance is the consolidated view for everything regulators care about: credential expirations, Self-ID aggregates, I-9 status, EEO-1 reports, and the audit log.

What's on the dashboard:
• Expiring Credentials — workers with credentials expiring in the next 30/60/90 days
• Missing W-9s — contractors over the $600 threshold without a W-9 on file
• Self-ID coverage — % of workers who have completed (or declined) Self-ID
• EEO-1 readiness — totals broken down by category, with thresholds met
• I-9 status — workers with verified vs. pending I-9s
• Outstanding background checks (if integrated)

Drill-down for any tile:
Click any number to filter People by that condition — "23 missing W-9s" shows the 23 contractor rows so you can act on them.

Reports tab:
• EEO-1 export (CSV in EEOC format)
• Vets-100 export (federal contractors)
• Workforce roster snapshot (point-in-time roster for audits)
• Pay equity analysis (gender pay gap by role)
• Termination report (departures by reason and tenure)

Audit log:
Every change to a worker record — hire, role change, comp change, termination, credential add/expire, Self-ID update — is logged with timestamp, actor, before/after. Filter by worker, date range, or actor. Required for SOC2 / HIPAA compliance audits.

Permissions:
• Org admins see the full dashboard
• Managers see only their direct reports' compliance
• Individual workers see their own status (My Compliance widget on Profile)