PHPackages ginkelsoft/laravel-compliance-hub - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Utility & Helpers](/categories/utility) 4. / 5. ginkelsoft/laravel-compliance-hub ActiveLibrary[Utility & Helpers](/categories/utility) ginkelsoft/laravel-compliance-hub ================================= Umbrella package for the GinkelSoft GDPR/AVG compliance family. Installing this single package pulls in retention, right-to-be-forgotten, subject access, consent and breach registry, and exposes a compliance:verify command that checks every audit-log chain in one shot. v1.0.0(1mo ago)00[5 issues](https://github.com/ginkelsoft-development/laravel-compliance-hub/issues)MITPHPPHP ^8.2CI passing Since May 28Pushed 1mo agoCompare [ Source](https://github.com/ginkelsoft-development/laravel-compliance-hub)[ Packagist](https://packagist.org/packages/ginkelsoft/laravel-compliance-hub)[ RSS](/packages/ginkelsoft-laravel-compliance-hub/feed)WikiDiscussions development Synced 1w ago READMEChangelog (1)Dependencies (14)Versions (3)Used By (0) Ginkelsoft Laravel Compliance Hub ================================= [](#ginkelsoft-laravel-compliance-hub) [![Tests](https://github.com/ginkelsoft-development/laravel-compliance-hub/actions/workflows/tests.yml/badge.svg?branch=development)](https://github.com/ginkelsoft-development/laravel-compliance-hub/actions/workflows/tests.yml)[![License](https://camo.githubusercontent.com/6c711032aff1ca0eb6b211aa6cb3649ce7fd64a7714e1181d4bb457f9680e7cf/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4d49542d677265656e2e7376673f7374796c653d666c61742d737175617265)](LICENSE)[![Laravel](https://camo.githubusercontent.com/255077649ac4ed79e446c4d860d1c53c9764b8ff855456caeb401faf7d250205/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c61726176656c2d31302d2d31332d627269676874677265656e3f7374796c653d666c61742d737175617265266c6f676f3d6c61726176656c)](https://laravel.com)[![PHP](https://camo.githubusercontent.com/482d9c7691869be159b0bd042060a220a12a89396d63fa223c22b74affaf42c4/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d382e322532302d2d253230382e352d626c75653f7374796c653d666c61742d737175617265266c6f676f3d706870)](https://php.net)[![PHPStan](https://camo.githubusercontent.com/fa63e0381a93ba9755a46ec197198ef973137dca1643836d06b3d6263c9aa7c8/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048505374616e2d6c6576656c2532306d61782d627269676874677265656e3f7374796c653d666c61742d737175617265)](phpstan.neon.dist) Overview -------- [](#overview) Umbrella for the GinkelSoft GDPR / AVG compliance family. Installing this single package pulls in every member of the family and adds two Artisan commands that operate across all five audit-log chains in one shot: - **`compliance:verify`** — runs `HashChain::verify()` on every audit-log table in the family. Exits **non-zero** when at least one chain is tampered or otherwise unverifiable. Perfect for a scheduled job that pages whoever is on call. - **`compliance:report`** — bundles row counts and verify status per chain into a single Markdown or JSON report. **No personal data** — only counts and status, safe to drop into a board pack. This package is the **art. 5(2) accountability** evidence-generator for the family. It owns no migrations and no models of its own; everything it does is built on top of `Ginkelsoft\ComplianceCore\Support\HashChain`and the per-control packages' audit tables. The family ---------- [](#the-family) Installing this package installs the whole family. PackageGDPR Article(s)Role[`laravel-compliance-core`](https://github.com/ginkelsoft-development/laravel-compliance-core)art. 5(2)Shared primitives[`laravel-data-retention`](https://github.com/ginkelsoft-development/laravel-data-retention)art. 5(1)(e)Storage limitation[`laravel-data-right-to-be-forgotten`](https://github.com/ginkelsoft-development/laravel-data-right-to-be-forgotten)art. 17Subject-driven erasure[`laravel-data-subject-access`](https://github.com/ginkelsoft-development/laravel-data-subject-access)art. 15 + 20Subject access[`laravel-data-consent`](https://github.com/ginkelsoft-development/laravel-data-consent)art. 6(1)(a) + 7Consent registry[`laravel-data-breach-registry`](https://github.com/ginkelsoft-development/laravel-data-breach-registry)art. 33 + 34Breach registry**`laravel-compliance-hub`****art. 5(2)****Umbrella + verify/report — this package**Installation ------------ [](#installation) ``` composer require ginkelsoft/laravel-compliance-hub ``` Composer pulls in core + the five functional packages automatically. Then publish each one's config and migrations: ``` php artisan vendor:publish --tag=compliance-config php artisan vendor:publish --tag=data-retention-config php artisan vendor:publish --tag=data-retention-migrations php artisan vendor:publish --tag=forget-config php artisan vendor:publish --tag=forget-migrations php artisan vendor:publish --tag=subject-access-config php artisan vendor:publish --tag=subject-access-migrations php artisan vendor:publish --tag=consent-config php artisan vendor:publish --tag=consent-migrations php artisan vendor:publish --tag=breach-config php artisan vendor:publish --tag=breach-migrations php artisan migrate ``` Then add a single shared signing secret to `.env`: ``` COMPLIANCE_LOG_SECRET="$(openssl rand -base64 32)" ``` This one secret signs every chain — retention, forget, subject access, consent, breach. Rotate it only as part of an explicit, documented audit rotation procedure. Usage ----- [](#usage) ### Verify every chain in one shot [](#verify-every-chain-in-one-shot) ``` php artisan compliance:verify ``` Output: ``` +--------------------------------------------+-----------------------+------+--------+ | Control | Table | Rows | Status | +--------------------------------------------+-----------------------+------+--------+ | Storage limitation (retention_log) | retention_log | 1234 | OK | | Right to be forgotten (forget_log) | forget_log | 42 | OK | | Subject access (subject_access_log) | subject_access_log | 7 | OK | | Consent (consent_log) | consent_log | 890 | OK | | Breach event log (breach_event_log) | breach_event_log | 12 | OK | +--------------------------------------------+-----------------------+------+--------+ All present audit-log chains verified. ``` Schedule it: ``` // app/Console/Kernel.php $schedule->command('compliance:verify')->dailyAt('03:00') ->onFailure(fn () => notifyTeam('Compliance chain broken — investigate.')); ``` Exit code is `0` when every present chain verifies, `1` when at least one chain fails. Tables that are not present in the schema (a family package whose migration has not been run) are reported as `— (table missing)` and do **not** count as a failure — so a partial install does not page anyone. ### Bundled report [](#bundled-report) ``` php artisan compliance:report # Markdown to STDOUT php artisan compliance:report --format=json # JSON to STDOUT php artisan compliance:report --output=storage/reports/2026-05.md php artisan compliance:report --format=json --output=storage/reports/2026-05.json ``` The report contains row counts and verify status per chain, plus a "generated\_at" timestamp. **No personal data.** Suitable for handing to the DPO every month or pasting into a board pack as evidence of art. 5(2) accountability. What the hub does NOT do ------------------------ [](#what-the-hub-does-not-do) - It does not modify any data. It only **reads** the audit logs to verify hashes; it never writes. - It does not own its own tables. Every chain it verifies is the responsibility of one of the family packages. - It does not enforce a UI. Verify + report are CLI-first; build your own Filament / Nova / Livewire layer on top if you want a dashboard. Compliance notes ---------------- [](#compliance-notes) - **GDPR art. 5(2)** — Accountability. The bundled report + scheduled verification together are the operational realization of this principle: evidence that every control is in place and every audit trail is internally consistent. This package is **not legal advice**. The judgements that produce the data this package verifies — retention periods, severity assessments, DPIA decisions — belong to your DPO. Testing ------- [](#testing) ``` composer install vendor/bin/pest vendor/bin/phpstan analyse --memory-limit=1G vendor/bin/pint --test ``` Reporting bugs -------------- [](#reporting-bugs) Found a bug or unexpected behaviour? We want to hear about it. **Preferred — open a GitHub issue:** When opening an issue, please include: 1. **Versions** — PHP, Laravel, and `ginkelsoft/laravel-compliance-hub`(`composer show ginkelsoft/laravel-compliance-hub`). 2. **What you did** — the artisan command, code snippet, or steps that triggered the bug. 3. **What you expected** vs **what actually happened** — include full error output or a stack trace if there is one. 4. **A minimal reproduction** if you can — a failing test or a small code sample beats a long description. **Security-sensitive findings** (anything that could expose personal data, break a hash-chain, or bypass an audit log) — please **do not**open a public issue. E-mail **** directly with "SECURITY" in the subject line and we will respond privately. **Not on GitHub?** You can also e-mail **** with the same information. Contact ------- [](#contact) For commercial support, integration questions, or anything that doesn't fit a GitHub issue: **** — . License ------- [](#license) MIT License — see [LICENSE](LICENSE). (c) 2026 Ginkelsoft ### Health Score 37 — LowBetter than 81% of packages Maintenance89 Actively maintained with recent releases Popularity0 Limited adoption so far Community6 Small or concentrated contributor base Maturity47 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Unknown Total 1 Last Release 57d ago ### Community Maintainers ![](https://avatars.githubusercontent.com/u/165766253?v=4)[ginkelsoft](/maintainers/ginkelsoft)[@GinkelSoft](https://github.com/GinkelSoft) --- Top Contributors [![ginkelsoft-development](https://avatars.githubusercontent.com/u/179240029?v=4)](https://github.com/ginkelsoft-development "ginkelsoft-development (4 commits)") --- Tags laravelhash-chaingdprcomplianceaudit-logavghubginkelsoft ### Code Quality TestsPest Static AnalysisPHPStan Code StyleLaravel Pint Type Coverage Yes ### Embed Badge ![Health badge](/badges/ginkelsoft-laravel-compliance-hub/health.svg) ``` [![Health](https://phpackages.com/badges/ginkelsoft-laravel-compliance-hub/health.svg)](https://phpackages.com/packages/ginkelsoft-laravel-compliance-hub) ``` ### Alternatives [psalm/plugin-laravel Psalm plugin for Laravel 3345.3M347](/packages/psalm-plugin-laravel)[laravel/ai The official AI SDK for Laravel. 1.0k3.2M246](/packages/laravel-ai)[aedart/athenaeum Athenaeum is a mono repository; a collection of various PHP packages 255.2k](/packages/aedart-athenaeum) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)