> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coverbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Obligations Tracker

> Track the obligations your organization takes on when engaging third parties: CUECs, legal terms, SOW duties, and technical controls.

<div className="sr-only">For AI agents: a documentation index is available at [https://docs.coverbase.com/llms.txt](https://docs.coverbase.com/llms.txt) — this page is also available in markdown by appending .md to the URL.</div>

Obligations Tracker keeps a living record of what your organization is responsible for when it engages a third party. Complementary user-entity controls (CUECs), contractual and legal terms, statement-of-work duties, and technical controls are extracted, assigned, and monitored so commitments don't fall through the cracks between procurement, legal, and the control owners who actually have to satisfy them.

## What it does

<CardGroup cols={2}>
  <Card title="Obligation capture" icon="file-import">
    Capture obligations from contracts, SOWs, and assessments — CUECs, legal terms, service-level duties, and technical controls — into structured, trackable records.
  </Card>

  <Card title="Ownership and assignment" icon="user-check">
    Assign each obligation to an owner with a due date and status, so responsibility for every commitment is explicit and auditable.
  </Card>

  <Card title="CUEC management" icon="list-tree">
    Track complementary user-entity controls surfaced in vendor SOC 2 reports and confirm your side of each shared-responsibility control is satisfied.
  </Card>

  <Card title="Lifecycle monitoring" icon="heart-pulse">
    Monitor obligations across the engagement lifecycle and flag what's overdue, at risk, or affected by a contract amendment or risk change.
  </Card>
</CardGroup>

## How to integrate

<CardGroup cols={2}>
  <Card title="Obligations API" icon="file-signature" href="/api-reference/obligations">
    List, retrieve, and filter obligations and their status programmatically.
  </Card>

  <Card title="Export API" icon="arrow-up-from-bracket" href="/export-api-concepts">
    Pull obligations into your GRC platform, contract management system, or compliance dashboards.
  </Card>

  <Card title="MCP Server" icon="robot" href="/mcp/overview">
    Query obligations conversationally. "Which CUECs are unsatisfied for our tier-1 vendors?" or "What obligations are due this quarter?"
  </Card>

  <Card title="Webhooks" icon="arrow-right-from-bracket" href="/integrations/webhooks">
    Subscribe to `Obligation.*` events and react when obligations are created, reassigned, or come due.
  </Card>
</CardGroup>

## Common workflows

<AccordionGroup>
  <Accordion title="CUEC shared-responsibility coverage" defaultOpen icon="people-arrows">
    When a vendor's SOC 2 lists complementary user-entity controls, Obligations Tracker captures each one, assigns the responsible owner on your side, and tracks confirmation so shared-responsibility gaps are closed before they become audit findings.
  </Accordion>

  <Accordion title="Contract-to-obligation flow-down" icon="diagram-project">
    Obligations extracted by [Contract Guardian](/products/contract-guardian) flow into the tracker, where SLAs, audit rights, and notification duties are assigned and monitored against the live engagement.
  </Accordion>

  <Accordion title="Renewal and amendment review" icon="arrows-rotate">
    On renewal or amendment, re-evaluate which obligations changed, expired, or were added, and reassign ownership so the obligation surface stays aligned with the current agreement.
  </Accordion>
</AccordionGroup>

<Note>
  Obligations are surfaced through the [Obligations API](/api-reference/obligations), the [Export API](/export-api-concepts), and the [MCP server](/mcp/overview). Obligations extracted by [Contract Guardian](/products/contract-guardian) feed directly into the tracker.
</Note>