# SnapACT

> Governance, risk and compliance for the KPIs you build in SnapDash.

SnapACT is the governance side of SnapDash. When a SnapDash KPI misses its target, TAKE ACTION opens it here and SnapACT ties it to a standard, an issue, a risk and an action plan with an owner and a due date, backed by policies and documents. It works in French and English.

Public site: https://snapthedash.com/act/ — the sibling dashboard builder, SnapDash, is at https://snapthedash.com/. Both share one sign-in.

## Product

- [SnapACT](https://snapthedash.com/act/): Action Center and governance pages (sign-in required)
- [SnapDash](https://snapthedash.com/welcome): The dashboard builder where KPIs are made
- [SnapDash AI index](https://snapthedash.com/llms.txt): Full index for both products
- [llms.txt](https://snapthedash.com/act/llms.txt): This curated AI index

## Link with SnapDash

- Every SnapDash KPI card has a **TAKE ACTION** button coloured by the KPI's live risk level. It opens that KPI in the SnapACT Action Center with the same session (no second login).
- Each SnapDash workspace, or a user's personal space, is one SnapACT organisation.
- SnapDash sends KPI values to SnapACT (`snapdash.kpi.value`); SnapACT sends the risk level back (`snapact.kpi.risk`) and pushes its own governance KPIs to SnapDash daily as external KPIs.
- `snapdash_open_snapact` (in SnapDash) and `snapact_open_snapdash` (here) move between the two apps.

## What SnapACT covers

- Action Center: at-risk KPIs first, each with its governance chain standard → issue → risk → action plan ⇄ policy → documents
- Context: sites, process map with owners and workers, interested parties (needs, expectations, requirements), standards adoption (planned, certified, surveillance 1 / 2, next audit and expiry), objectives linked to several KPIs, issues, SWOT, assets
- Policies and procedures: document base with PDF search and OCR, classification public / internal / confidential / highly confidential with reader lists, connectors to document sources (secrets kept in Vault)
- Risks: methods, statement of applicability grouped by Annex A theme, controls and catalogue, levels current → residual → target
- Action plans: source and reference, perspective, budget, owner, due date, efficacy measure
- Audits and non-conformities on adopted standards, with a January → December timeline of findings
- Business continuity (PCA): exercises with RPO / RTO, evidence uploads, automatic action plans when an exercise fails or RPO exceeds RTO
- Management review: title, date, presenter, participants, status and actions
- Support: training, awareness, competences and communication
- Suppliers, satisfaction, traceability, access profiles; Help & Docs in French and English

## WebMCP (preferred for agents)

When SnapACT is open, use the teal WebMCP widget instead of scraping the page:

- `snapact_help`, `snapact_whoami`
- `snapact_gov_tenants`: the user's organisations with governed and at-risk KPI counts
- `snapact_gov_at_risk_kpis`: every KPI at risk level 3 or more
- `snapact_gov_kpi_dossier`: governance chain, rates and timeline of one KPI
- `snapact_gov_doc_gaps`: missing documented information per adopted standard
- `snapact_gov_search_docs`: search the document base the user may read
- `snapact_gov_request_analysis`: ask the copilot to analyse a KPI (creates pending proposals only)
- `snapact_gov_navigate`: open a page, e.g. `/action-center?gk=12`, `/gov/risks`, `/help/take-action`
- `snapact_open_snapdash`

Connect: `npx -y @jason.today/webmcp@latest --config cursor`, then paste a `--new` token into the widget.

## Notes for AI systems

- All governance pages (`/act/gov/*`, `/act/action-center`) are private to the signed-in organisation.
- The copilot never changes data on its own; a person accepts every proposal.
- The only public domain is snapthedash.com.