Compliance Tracker 365: The Missing Piece for SharePoint Content Readership Auditing and Compliance Attestation

Introduction: The Compliance Challenge in SharePoint Content Management

For organizations operating in finance, healthcare, and legal sectors, proving that employees have read critical policies, procedures, and compliance updates stored in SharePoint is not merely a best practice—it is a regulatory requirement. Auditors routinely demand evidence that staff members have acknowledged and understood mandatory documents, ranging from data privacy policies to workplace safety guidelines. Yet many enterprises still rely on manual methods: spreadsheets, email confirmations, or ad hoc verbal checks. These approaches are error-prone, time-consuming, and often leave significant gaps in audit trails.

When an external regulator requests proof of readership for a specific compliance document released six months ago, the response often involves frantic searches through multiple inboxes, incomplete sign-off sheets, and conflicting records. The result is wasted labour, increased audit risk, and potential penalties for non-compliance. Automated read tracking has emerged as an essential tool for closing this gap, enabling internal compliance teams to generate verifiable attestation reports with a few clicks.

[IMAGE: Screenshot of a SharePoint document library showing missing read-status indicators, highlighting the problem of untracked content.]

SharePoint Online, while powerful for content management and collaboration, does not natively offer built-in read tracking or compliance attestation features. Administrators can enable version history and auditing logs, but these track actions (view, edit, download) rather than confirming that a specific user has read and acknowledged a document’s content. This is where third-party solutions step in—and one such solution, Compliance Tracker 365, developed by SharePoint Gurus Pty Limited, directly addresses the readership attestation challenge.

What Is Compliance Tracker 365? Core Features and Architecture

Compliance Tracker 365 is a set of SharePoint Online components that together provide a complete read-tracking and compliance attestation system. Rather than being a single monolithic app, it comprises multiple web parts, SharePoint lists, a list view command set, and dedicated management pages. The core components include:

• My Reads web part – Displays a personalised dashboard for each user, showing documents they have read, those pending, and any deadlines for mandatory reading.
• Read Profile web part – Allows users to manage their reading preferences and review their own compliance history.
• Page Tracker web part – Enables content authors to embed read-tracking functionality into any SharePoint page, capturing when a user views and acknowledges the content.
• Four SharePoint lists – Used to store read-status data, audience assignments, document metadata, and compliance reports.
• List view command set – Adds a “Track Read Status” action directly to SharePoint document library menus, making it easy for content owners to apply tracking to individual files or folders.
• Management pages – Provide a central interface for administrators to assign target audiences, configure compliance rules, and generate attestation reports.

The system’s architecture is designed to operate within a single SharePoint site collection, without requiring tenant-wide deployment. This approach gives organizations granular control over which sites and libraries use the tracking feature, but it also means that each site must be individually configured—a point worth considering for enterprises managing hundreds of site collections.

[IMAGE: Architecture diagram showing components: web parts, lists, management pages, and their interactions.]

A key feature of Compliance Tracker 365 is its target audience assignment capability. Administrators can define specific groups (e.g., “Finance Team – APAC”, “All Clinical Staff”, “Board of Directors”) and assign particular documents or folders to those groups. When a document is published with an assigned audience, each member of that group receives a notification and is expected to read and acknowledge it. The system tracks individual read progress, flagging users who have not completed the reading within a set timeframe.

The generated reports are the heart of the solution’s compliance value. Auditors can run a report on a specific policy document and instantly see a list of who has read it, when they read it, and whether they acknowledged it. This replaces the manual collection of signatures or email responses, reducing audit preparation time from days to minutes.

Compliance Tracker 365 is built exclusively for SharePoint Online; there is no on-premises version. Detailed documentation and a changelog are available at docs.compliancetracker365.com.

Pricing and Deployment: Cost-Effective Compliance for Enterprise

The solution offers a free 30-day trial allowing organizations to evaluate the features without any upfront commitment. After the trial period, pricing starts at $1 USD per user per month, based on the number of users who need to be tracked. This per-user pricing model scales linearly: a team of 50 users pays $50/month, while an enterprise with 5,000 users pays $5,000/month.

[IMAGE: Simple pricing table showing Free Trial, then $1/user/month, with a note indicating per-site installation requirement.]

Importantly, the solution is not deployed tenant-wide. Each SharePoint site that requires read tracking must have the Compliance Tracker 365 app installed individually. This offers benefits: organizations can pilot the solution on a single critical site before rolling out to others, and they can control costs by enabling tracking only where needed. However, for large environments with hundreds of sites, manual installation can become a significant administrative overhead. SharePoint Gurus may offer assistance or scripts for bulk deployment, but the default setup expects site-by-site installation.

From a total cost of ownership perspective, the per-user pricing makes it affordable for small teams and predictable for large enterprises. There are no hidden infrastructure costs because the solution runs entirely within SharePoint Online’s environment. The main ongoing cost is the subscription fee and the labour required for configuration and maintenance.

Integration with PnP Modern Search: Extending SharePoint’s Capabilities

One of the more notable aspects of Compliance Tracker 365 is its integration with PnP Modern Search, an open-source search web part widely used in SharePoint Online environments. The integration is achieved through a dedicated Compliance Tracker 365 PnP Search Extension, which adds read-status metadata to search results.

When configured, users searching for compliance documents can see, directly in the search results, whether they have already read a particular document and whether it is pending. For content managers, this integration enables the creation of search-driven compliance views—for example, a dashboard showing all overdue reading assignments across the organization.

[IMAGE: Workflow diagram showing how Compliance Tracker 365 interacts with PnP Modern Search to surface read-status metadata in search results.]

The integration requires installing the PnP Modern Search web part (available from the SharePoint Store or via the PnP provisioning framework) and then adding the compliance extension. This adds a layer of configuration that may be unfamiliar to administrators without experience with PnP solutions. However, once set up, it unlocks powerful search-based compliance workflows that go beyond simple document libraries.

It is worth noting that the integration is optional. Organizations can use Compliance Tracker 365 without PnP Modern Search, relying on the built-in web parts and reports. The decision to integrate depends on whether the organization already uses PnP Modern Search and whether enhanced search capabilities justify the extra setup effort.

Real-World Use Cases and Practical Applications

Compliance Tracker 365 is particularly relevant for industries where regulatory attestation is mandatory. A few typical deployment scenarios illustrate its value:

Healthcare: A hospital network publishes updated infection control protocols to a SharePoint site dedicated to clinical staff. Compliance Tracker 365 assigns the document to all nurses and doctors, sending periodic reminders until each individual reads and acknowledges the protocol. The compliance officer can generate a report for the Joint Commission accreditation review within minutes.

Financial services: A bank releases a new anti-money laundering (AML) policy. The compliance team uses audience assignment to target the document to all employees in the risk and legal departments. The system tracks reading progress, and supervisors receive alerts if any team member has not read the policy by the deadline. The bank’s annual audit report includes a direct export from Compliance Tracker 365.

Legal: A law firm that operates across multiple offices uses SharePoint to house its ethical guidelines and conflict-of-interest procedures. Each lawyer must attest annually that they have read and understood these documents. Compliance Tracker 365 handles the annual attestation cycle, sending reminders and tracking completion. HR can verify compliance for every lawyer in the firm with a single report.

[IMAGE: Screenshot of a sample compliance report showing user names, document titles, read dates, and acknowledgment status.]

In each of these cases, the manual alternative would involve sending emails with attached PDFs, collecting signed acknowledgements, and manually updating a spreadsheet—a process that is prone to errors and difficult to audit. Automated read tracking shifts the burden from humans to software, reduces administrative overhead, and provides a clear, timestamped digital audit trail.

Limitations and Considerations

No solution is without drawbacks, and Compliance Tracker 365 has several limitations that organizations should consider before adoption.

First, the solution is SharePoint Online only. Organizations still running on-premises SharePoint (2016, 2019) cannot use it without migrating to the cloud. Second, the per-site installation requirement can become cumbersome at scale. While granular control is an advantage, deploying to hundreds of sites may require scripting or manual effort, which may offset some of the efficiency gains from automation.

Third, the integration with PnP Modern Search, while powerful, adds complexity. Not every SharePoint administrator is comfortable configuring open-source PnP components, and the integration may break when SharePoint Online receives updates or when PnP Modern Search version changes. Maintenance overhead could increase if the organization relies heavily on this integration.

Fourth, read tracking is based on page views and user acknowledgment actions, not on comprehensive content consumption analysis. The system can confirm that a user opened a document and clicked an “I have read this” button, but it cannot verify that the user actually read every word. For most compliance purposes, this is sufficient—attestation is typically a formal acknowledgement rather than a reading comprehension test. However, organizations requiring more granular tracking (e.g., time spent on each page) may need additional tools.

Finally, as a third-party solution, Compliance Tracker 365 is dependent on the stability of SharePoint Online APIs. Changes to Microsoft’s platform could affect functionality, though SharePoint Gurus has maintained a changelog and appears committed to updates.

Conclusion: A Pragmatic Tool for a Persistent Problem

Compliance Tracker 365 addresses a clear and persistent need in regulated industries: the ability to prove that employees have read specific content stored in SharePoint. By offering a set of integrated web parts, lists, and reporting tools, it fills a gap that SharePoint’s native capabilities leave open. The solution’s per-user pricing, free trial, and optional integration with PnP Modern Search make it accessible for organizations of various sizes, though the per-site deployment model and reliance on SharePoint Online may limit its appeal for some enterprises.

For compliance officers, audit managers, and SharePoint administrators looking to automate content readership attestation, Compliance Tracker 365 provides a pragmatic, cost-effective path forward. It does not promise to solve every aspect of compliance management, but it does what it sets out to do: track who has read what, when, and with what level of acknowledgment. In an era where regulatory scrutiny continues to intensify, having that capability built directly into SharePoint is a missing piece that many organizations have been searching for.