Infrastructure architecture
LiveGRS ingest and scoring
Sources converge on tenant-scoped ingest. Scores are explainable: Pass, Fail, Unknown, or Not Applicable — never silent pass on missing evidence.
Architecture diagram
Data or evidenceIdentity or control
Callout 1
Azure connector
Estate signals
Landing health, policy, and optional Log Analytics or Meter aggregates.
Need this architecture for your internal review?
Request an editable .drawio source stencil for internal architecture validation.
Detail
Missing evidence = Unknown, not Pass. Overall score discloses exclusions, estate coverage, rule version, and freshness.
- Pass / Fail / Unknown / Not Applicable
- Not a SOC 2 / ISO / GDPR certification
- Policy resource existing ≠ policy enforced
- Landing .ok / manifests → D7 Extraction
- Policy / PE / region → D1 Sovereignty
- ADF/CPI failures → D4–5 Integration
- Cost / orphan signals → D2 Cost (partial)