Help Center › Exports & the audit binder
Exports & the OCR audit binder
Every report Ward produces is built right in your browser — nothing is uploaded, and no account is needed. This page covers all the formats and the one-click audit binder.
1. Where exports live
Most exports are on the Reports tab. A few module-specific exports live on their own tabs (Risk Register, POA&M, Asset Inventory, Policies, Scan/IR Cadence) and on the Data tab (full JSON). See the per-tab table below.
2. Fill in your details first
On the Reports tab, fill in the four header fields so your reports are properly attributed:
- Practice / organization
- HIPAA Security Official
- Assessor name
- Scope (which systems are covered)
These appear on the executive summary, full report, and binder index.
3. The export formats
From the Reports tab’s Export results section you get four one-click formats of the whole assessment:
| Format | Best for | What’s inside |
|---|---|---|
| Excel (.xlsx) | Working the data in a spreadsheet | One sheet each: Summary, SRA Answers, Risk Register, 2026 Readiness, Open Gaps. |
| CSV | Importing into any tool | A flat, clean comma-separated export. |
| JSON | Backup & moving between browsers/computers | The complete machine-readable assessment. See section 6. |
| Markdown | Pasting into docs / version control | A formatted text report that renders anywhere. |
Below that, the Reports tab also offers narrative documents:
- Full SRA report (Markdown) — the complete risk analysis, all 108 questions.
- Executive summary (Markdown) — the bottom-line scorecard for leadership.
4. Print / Save as PDF
Click “🖨 Print / Save as PDF.” Ward renders a clean, formatted audit binder in a print view; in the print dialog choose “Save as PDF.” Because this uses your browser’s own print engine, your patient data never leaves your machine — there’s no PDF server involved.
5. The OCR audit binder (ZIP)
The headline export. Click “📦 Download audit binder (ZIP)” on the Reports tab and Ward bundles your entire compliance package into a single ZIP file — built entirely in the browser (no library, no upload). The ZIP contains 11 documents:
| File | Contents |
|---|---|
00-binder-index.md | Cover page: organization, date, Security Official, contents, and a snapshot of progress/gaps/readiness. |
01-executive-summary.md | Bottom-line scorecard. |
02-full-sra-report.md | Complete risk analysis, all 108 questions. |
03-risk-register.csv | Rated risks (likelihood × impact). |
04-poam.md | Plan of Action & Milestones (per-question remediation). |
05-2026-gap-report.md | 2026 readiness with per-mandate POA&M. |
06-vendors-baas.md | Business associate / BAA log. |
07-training-log.md | Workforce training records. |
08-asset-inventory.md | ePHI asset inventory & data map (2026 requirement). |
09-policies.md | HIPAA policies & procedures, versioned, with attestation. |
10-cadence-log.md | Scan/pen-test/IR/restore cadence log with due dates (2026 requirement). |
The file is named like Ward-audit-binder-[your-entity]-[date].zip. Unzip it and you have an organized, dated, OCR-ready binder — the single most useful thing to hand to an auditor or keep on file.
Tip: the binder is only as complete as your data. Fill out the Asset Inventory, Policies, Cadence, Vendors, and Training tabs before generating it so all 11 documents have real content.
6. JSON backup & portability
The JSON export (on both the Reports tab and the Data tab) is your backup and your way to move an assessment between browsers or computers. It contains your answers, risks, org details, vendors, training, snapshots, assets, and per-mandate POA&M. Import it on another machine via the Data tab’s Import assessment (JSON). See Security & privacy → Your data.
This file may contain PHI if you typed any into the notes fields. Treat the exported JSON like any patient record: store it securely and transfer it safely. Ward never uploads it for you — you control it entirely.
7. Per-tab exports
| Tab | Exports available |
|---|---|
| Reports | Excel, CSV, JSON, Markdown, Full SRA (MD), Exec summary (MD), Print/PDF, Audit binder ZIP. |
| Risk Register | Risk register (CSV), POA&M (Markdown). |
| POA&M | POA&M (Markdown), POA&M (CSV). |
| 2026 Readiness | 2026 gap report (Markdown). |
| Asset Inventory | Asset inventory (CSV). |
| Policies | Policy manual (Markdown). |
| Scan/IR Cadence | Cadence log (CSV), Cadence log (Markdown). |
| Training | Training log (CSV). |
| Snapshots | Per-snapshot JSON export. |
| Data | Full assessment JSON (export & import). |
8. Everything is built locally
Every format above — including the Excel workbook and the ZIP — is generated by JavaScript running in your browser. Nothing is sent to a server to be rendered. That’s how Ward can promise that patient data never leaves your machine even when you produce a full audit package. See Security & privacy for the full picture.