> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bumara.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Compliance health check
> How Bumara reviews your standing with every regulator, what the health score means, and what to do with the findings.
The compliance health check — called a **liability assessment** in your account — is a review of
where your business actually stands with each regulator you are registered with. It finds
outstanding returns, unpaid amounts, accruing penalties and lapsed registrations, including
anything from before you joined Bumara.
It is carried out by the Bumara compliance team, not by an automated scan. A person reviews each
regulator's records for your business and records what they find.
## How it works
A short set of questions about your business: which regulators you are registered with, when
you last filed with each, whether you have employees, your approximate turnover. Answer as
accurately as you can — this is what the review is scoped against.
For some regulators the team needs to see your portal records. You can supply credentials
securely, or provide statements and notices yourself. If neither is provided, that regulator's
check may be recorded as blocked.
One review per regulator, worked in parallel. ZRA is always treated as urgent because tax
exposure grows fastest. The whole assessment is targeted at 72 hours.
You do not wait until the end. As each issue is verified it appears in your findings list.
The page refreshes itself every couple of minutes.
When every regulator check is finished, the assessment completes with an overall health
score, an outcome band, and a list of recommended actions.
## What you see while it runs
| Element | What it tells you |
| ------------------------ | ---------------------------------------------------------------------------- |
| Status banner | That the assessment is in progress, and when it started |
| Provisional health score | An indicative score that moves as findings are confirmed |
| Total liability exposure | The confirmed amount owed so far, across all regulators |
| Regulator table | One row per regulator: how far the review has got, findings so far, exposure |
| Findings list | Each confirmed issue, with amounts and the period it covers |
| Tickets | Requests from the team for a document or a clarification |
You only see findings once they have been **confirmed**. Issues still being investigated are
not shown, so the list does not flicker with items that turn out to be nothing.
## Regulators covered
| Regulator | What is reviewed |
| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **ZRA** | Income tax, VAT, withholding tax, turnover tax, PAYE, penalties, interest, tax clearance certificate status, unfiled returns, audit or enforcement flags |
| **NAPSA** | Contribution arrears, penalties, unregistered employees, employer registration status |
| **PACRA** | Late or missing annual returns, strike-off notices, restoration needs, unfiled director, share or address changes, outstanding penalties |
| **NHIMA** | Contribution arrears, penalties, employer registration status |
| **WCF** | Premium arrears, outstanding levy assessments, registration status |
| **Local council** | Trading licence expiry, business levy arrears, fire certificate expiry, council penalties |
Only regulators you told Bumara you are registered with are reviewed. The rest are skipped.
## Reading a finding
Each finding tells you six things:
| Part | Meaning |
| --------------- | --------------------------------------------- |
| **Severity** | Critical, Warning or Info — how serious it is |
| **Description** | What was found, in plain language |
| **Period** | The tax or levy period the issue covers |
| **Principal** | The original amount owed |
| **Penalties** | What has been added as a penalty |
| **Interest** | What has accrued since |
A finding may also be marked as **accruing**, meaning the penalty or interest is still growing.
Accruing findings are the ones to deal with first.
## The health score
The score runs from 0 to 100. It starts at 100 and deductions are applied for what was found:
| What was found | Deduction |
| ------------------------------------------------- | ------------------ |
| Each confirmed critical finding | 15 points |
| Each confirmed warning finding | 8 points |
| Each confirmed informational finding | 2 points |
| Each finding still accruing penalties or interest | A further 5 points |
| Company under strike-off notice | 25 points |
| Any regulator account suspended | 20 points |
| Each regulator that could not be checked | 5 points |
The score cannot go below 0. A **provisional** score is shown while the review runs; the
**verified** score is set when it completes.
## The outcome band
| Outcome | What it means |
| ------------ | -------------------------------------------------------------------------- |
| **Clean** | Nothing confirmed against you at any regulator |
| **Minor** | Issues exist but are small and contained |
| **Material** | Three or more warnings, or total exposure above K50,000 |
| **Critical** | At least one critical finding, or a suspended account or strike-off notice |
A clean outcome moves your account to fully active. Any other outcome moves you to
provisionally active — you can use Bumara normally while the recommended actions are worked through.
## Disputing a finding
If a finding is wrong — you have proof of payment, or the period is not yours — say so.
In the findings list, find the row and choose **Dispute**.
Write what you believe is wrong and what evidence you have. Be specific: "Paid on 14 March,
receipt attached" is far more useful than "This is not correct".
Upload the receipt, statement or acknowledgement that supports your position.
The finding is marked **Disputed** and the Dispute button is disabled. The team reviews it
against the regulator's records.
The outcome is one of two things: the dispute is accepted and the finding is dismissed — removed
from your totals and score — or it is rejected and the finding returns to confirmed, with an
explanation sent to you.
## Recommendations
Every confirmed finding produces a **recommendation** — the specific action Bumara suggests.
Related findings for the same regulator are bundled into one recommendation so you are not given
five separate actions for what is really one job.
| Recommendation type | What it means |
| ---------------------- | --------------------------------------------------------------- |
| **Service request** | A one-off piece of work, such as restoring a struck-off company |
| **New obligation** | Set up a recurring filing you should have been making |
| **Backfill filings** | Catch up on periods you missed |
| **Payment required** | Settle an outstanding amount |
| **Information needed** | The team needs something from you before it can advise |
| **Escalated** | Serious enough to need senior review before any action |
| **Accepted risk** | You have chosen to acknowledge but not act |
| **Not remediable** | Cannot be fixed — usually a historical period that has closed |
For each recommendation you can:
* **Proceed** — Bumara starts the work. A service request or obligation is created for you.
* **Defer** — not now. You can add a reason, and it stays in your list.
* **Dismiss** — remove it from your view entirely.
Some recommendations show **Awaiting review** instead of Proceed and Defer. These are serious
enough that a Bumara manager reviews them before you can act. You will be notified when they
are released.
## The report
Once the assessment completes, a downloadable report becomes available covering every regulator
checked, every confirmed finding with amounts, and every recommendation. It is not available
while the assessment is still running.
## Running it again
You can submit a new intake at any time — after clearing your findings, or if your circumstances
change. Doing so starts a fresh assessment and marks the previous one as superseded. Every past
assessment is kept, so you can show how your compliance position has improved over time.
Findings and recommendations stay available in your account after the assessment completes.
See [Findings and recommendations](/compliance/findings-and-recommendations) for working
through them day to day.