Skip to content
ENVI
Request a demo

Platform overview Govern

Access · compliance · risk governance

Governance read from what the platform really holds.

Access certification, just-in-time access, autonomous compliance, vendor risk, breach response, PIA and a sovereignty map — evaluated from real platform reads, not self-declared.

What it does

Govern brings access, compliance and risk work into the same console as the security work. Access certification runs permission reviews; just-in-time access issues time-boxed grants that expire on their own.

Autonomous Compliance checks ten controls on demand against what the platform holds — from audit-trail integrity to breach notification within 72 hours — and shows the figure that decided each one and the requirement it speaks to. A control that cannot be read is “not assessed”, never assumed to pass.

A persisted vendor risk register, breach response, privacy impact assessments (PIA) and a sovereignty map complete the picture.

Key capabilities

  • Access certification

    Permission reviews, with a control that checks they are decided within 30 days.

  • Just-in-time access

    Time-boxed privileged grants; a control checks they expire within 8 hours.

  • Autonomous Compliance

    Ten controls read from the platform, each mapped to GDPR, Decree 13, ISO 27001, SOC 2 or NIST requirements.

  • Vendor risk

    A persisted vendor risk register.

  • Breach response and PIA

    Breach handling and privacy impact assessments in the same place as the evidence.

  • Sovereignty map

    Where your data lives, in one view.

How it works

  1. 01

    Read

    Controls read the real state: audit trail, access grants, scans, cases.

  2. 02

    Judge

    Each control passes, fails or is “not assessed” — never assumed.

  3. 03

    Show

    The deciding figure and the requirement it speaks to are shown.

  4. 04

    Fix

    A failing control links to where a person fixes it.

The human approval gate

A just-in-time revocation proposed by the SOC is an action like any other: it needs a person’s approval.

Licence

Included in
Most of Govern comes with the Core, so with every licence (Module, Platform, Sovereign)
Licence feature
Core · module.privacy_gate

Some Govern features depend on Privacy Shield’s licence. [Which ones — confirm before publication.]

See pricing and licences

See your controls read from real data.

We walk through Autonomous Compliance, just-in-time access and the audit trail with your risk team.

Request a demoPlatform overview