Data Portability
Your assessment is always yours. Export a complete, self-serve copy of an entire cycle — every entry, file, comment, history, and the audit trail — in open formats, with no support ticket and no proprietary lock-in.
Your data is always yours to take with you. Any admin can export a complete, self-serve copy of an entire cycle at any time — no support ticket, no proprietary format, nothing held back.
The Complete data export is available on the Team plan and above, from the cycle's Export dialog. It's download-only (it isn't offered as a shared-with-QSA link, since it includes internal comments and the audit trail).
How to export
- Open a cycle and click Export.
- Under Package shape, choose Complete data export.
- Download the ZIP —
ankos-complete-export-<cycle>.zip.
That's it. No request to support, no waiting.
What's included
Everything in the cycle, in open and parseable formats:
data/entries.json— every entry (all states), with the full field set: state, owner, narrative, justification, sign-off, due date, carry-forward, and the complete QSA decision history (qsa_history).data/audit-trail.jsonanddata/audit-trail.csv— the full activity log for the cycle (who did what, when), as both JSON and a human-readable CSV.data/comments.json— every comment on every entry, including edited and deleted ones, with timestamps.data/watchers.json— watchers on each entry (a row withunwatched: truemarks someone who opted out).data/checklist.json— every checklist item and its completion state.Req-01 … Req-12/— every evidence file, in its original format (PDF, PNG, DOCX, JSON, …), named with the entry ID for cross-reference.manifest.json— a SHA-256 hash of every file in the package.README.md— an index of the above.
Open formats only
Structured data is JSON; the audit trail also ships as CSV; evidence files keep their original formats. There is no proprietary Ankos format — you can read, archive, diff, or migrate the export with standard tools.
Verify integrity
Every file is hashed in manifest.json. From the package root:
jq -r '.integrity.files[] | "\(.hash) \(.path)"' manifest.json | shasum -a 256 -c -Every line should report OK.
Ankos organizes and stores your evidence; it does not determine compliance. The complete data export is your record of the cycle — not a compliance determination.

