Bufdir Export

Bufdir Export is the culminating action of the compliance reporting workflow and directly fulfills the most-cited need across all four organizations. Without reliable export, report generation has no practical value - the exported file is what organizations submit to Bufdir. An audited export mechanism eliminates compliance risk and frees admin staff for mission-critical work. Storing the file server-side creates an audit record of what was submitted, protecting organizations in case of future compliance questions from the funding agency.

Export is implemented as a Next.js API route streaming the generated report file to the browser. The file format must be confirmed with Bufdir during Phase 2 development. ExportFileStorageService stores a server-side copy for audit purposes. The route enforces org admin or global admin role checks and logs each export event with timestamp, user ID, org, and date range to the audit log. Rate limiting prevents accidental duplicate submissions. The export step should be visually distinct from the generation step in the UI to prevent user confusion between preview and final submission.