Connector Center

Connect real enterprise systems and turn external activity into governed, auditable, observable, trust-compatible evidence.

6/10 connected

Demo datasetStore: Demo Data

Illustrative pilot dataset — figures model a representative enterprise deployment.

2 metrics live in this mode Switch to live data

Connectors

6/10

1 error · 1 pending

Records Synced

7,833

avg 193 ms latency

Sync Health

6 healthy

1 degraded · 1 failing

High-Risk Scopes

Connectors with excessive scopes

Evidence Types

Mapped into the evidence model

Connected Systems

External systems feeding governed evidence. No provider-specific logic lives outside its adapter.

Microsoft 365

OAuth 2.0 + PKCE

Connected

identity access

HealthySynced 2mo ago

Microsoft Teams

OAuth 2.0 + PKCE

Configured

discussion

IdleSynced 2mo ago

SharePoint

OAuth 2.0 + PKCE

Connected

policy

HealthySynced 2mo ago

Jira

OAuth 2.0

Connected

governance decision

HealthySynced 2mo ago

ServiceNow

OAuth 2.0

Configured

approval

DegradedSynced 2mo ago

GitHub

API Token

Connected

change control

HealthySynced 2mo ago

Slack

OAuth 2.0

Pending

discussion

IdleNever synced

AWS

IAM Role (AssumeRole)

Connected

identity access

HealthySynced 2mo ago

Azure

Workload Identity Federation

Connected

identity access

HealthySynced 2mo ago

Google Cloud

Workload Identity Federation

Error

identity access

FailingSynced 2mo ago

Sync Health

One reusable sync engine — mode, cursor, rate-limit, and failures per connector.

Connector	Mode	Status	Records	Rate limit	Failures	Last sync
Microsoft 365	incremental	Healthy	1,284	4200/5000	0	2mo ago
Microsoft Teams	webhook	Idle	312	5000/5000	0	2mo ago
SharePoint	incremental	Healthy	540	5000/5000	0	2mo ago
Jira	incremental	Healthy	642	920/1000	0	2mo ago
ServiceNow	incremental	Degraded	188	60/200	3	2mo ago
GitHub	webhook	Healthy	967	4800/5000	0	2mo ago
Slack	webhook	Idle	0	5000/5000	0	—
AWS	incremental	Healthy	2,140	5000/5000	0	2mo ago
Azure	incremental	Healthy	1,760	5000/5000	0	2mo ago
Google Cloud	incremental	Failing	0	0/600	7	2mo ago

Permission Scope Review

Requested vs granted vs excessive scopes with least-privilege guidance — procurement/security critical.

Microsoft 365

High riskrisk score 32

Granted

User.Read.All
AuditLog.Read.All
Files.Read.All

Missing (required)

none

Excessive

Files.Read.All

Least-privilege: Revoke "Files.Read.All" — granted but not required.

Jira

High riskrisk score 32

Granted

read:jira-work
read:jira-user
manage:jira-project

Missing (required)

none

Excessive

manage:jira-project

Least-privilege: Revoke "manage:jira-project" — granted but not required.

AWS

High riskrisk score 32

Granted

cloudtrail:LookupEvents
iam:GenerateCredentialReport
s3:GetObject

Missing (required)

none

Excessive

s3:GetObject

Least-privilege: Revoke "s3:GetObject" — granted but not required.

Google Cloud

Low riskrisk score 28

Granted

logging.logEntries.list

Missing (required)

iam.roles.get

Excessive

none

Slack

Low riskrisk score 22

Granted

—

Missing (required)

channels:history
channels:read

Excessive

none

Microsoft Teams

Medium riskrisk score 14

Granted

ChannelMessage.Read.All
Team.ReadBasic.All

Missing (required)

none

Excessive

none

ServiceNow

Low riskrisk score 8

Granted

incident.read
change_request.read

Missing (required)

approval.read

Excessive

none

SharePoint

Low riskrisk score 0

Granted

Sites.Read.All

Missing (required)

none

Excessive

none

GitHub

Low riskrisk score 0

Granted

repo:status
read:org
pull_requests:read

Missing (required)

none

Excessive

none

Azure

Low riskrisk score 0

Granted

Monitor.Read
Directory.Read.All

Missing (required)

none

Excessive

none

Evidence & Event Mappings

Evidence Mappings

External entities → the existing evidence model (trust-compatible).

Connector	Source	Evidence	Trust
Microsoft 365	auditLog	identity access	trust-ready
Microsoft Teams	channelMessage	discussion	trust-ready
SharePoint	document	policy	trust-ready
Jira	issue	governance decision	trust-ready
ServiceNow	approval	approval	trust-ready
GitHub	pull_request	change control	trust-ready
Slack	message	discussion	trust-ready
AWS	cloudTrailEvent	identity access	trust-ready
Azure	activityLog	identity access	trust-ready
Google Cloud	auditLogEntry	identity access	trust-ready

Event Mappings

Source events → the existing observability event model.

Source event	Normalized type	Category	Severity
audit.created	connector.evidence.mapped	evidence	low
message.posted	connector.webhook.received	evidence	info
document.updated	connector.evidence.mapped	evidence	low
issue.transitioned	connector.evidence.mapped	decision	low
change.approved	connector.evidence.mapped	approval	low
pull_request.merged	connector.evidence.mapped	evidence	low
message.posted	connector.webhook.received	evidence	info
iam.access	connector.evidence.mapped	identity	low
role.assignment	connector.evidence.mapped	identity	medium
iam.binding.changed	connector.permission.changed	identity	high

Connector Logs

Connector events normalized into the observability model — a view, not a second log.

Event	Connector	Severity	Outcome	When	Hash
connector.evidence.mapped Mapped Jira issue GOV-218 → governance decision evidence.	conn-jira	low	success	2mo ago	0xCONN-L…0001
connector.sync.completed Incremental sync completed — 24 pull requests.	conn-github	info	success	2mo ago	0xCONN-L…0002
connector.webhook.received Webhook received — channel message in #ai-governance.	conn-teams	info	success	2mo ago	0xCONN-L…0003
connector.sync.started Incremental CloudTrail sync started.	conn-aws	info	success	2mo ago	0xCONN-L…0004
connector.permission.changed IAM binding changed — re-review required.	conn-gcp	medium	success	2mo ago	0xCONN-L…0005
connector.sync.failed Cloud Audit Log sync failed — missing iam.roles.get scope.	conn-gcp	high	error	2mo ago	0xCONN-L…0006
connector.auth.failed OAuth consent not completed.	conn-slack	high	error	2mo ago	0xCONN-L…0007

Connector Reports

Procurement & security documents — reuse the shared report shell.

Connected Systems

External systems feeding governed evidence. No provider-specific logic lives outside its adapter.

Microsoft 365

OAuth 2.0 + PKCE

Connected

identity access

HealthySynced 2mo ago

Microsoft Teams

OAuth 2.0 + PKCE

Configured

discussion

IdleSynced 2mo ago

SharePoint

OAuth 2.0 + PKCE

Connected

policy

HealthySynced 2mo ago

Jira

OAuth 2.0

Connected

governance decision

HealthySynced 2mo ago

ServiceNow

OAuth 2.0

Configured

approval

DegradedSynced 2mo ago

GitHub

API Token

Connected

change control

HealthySynced 2mo ago

Slack

OAuth 2.0

Pending

discussion

IdleNever synced

AWS

IAM Role (AssumeRole)

Connected

identity access

HealthySynced 2mo ago

Azure

Workload Identity Federation

Connected

identity access

HealthySynced 2mo ago

Google Cloud

Workload Identity Federation

Error

identity access

FailingSynced 2mo ago

Sync Health

One reusable sync engine — mode, cursor, rate-limit, and failures per connector.

Connector	Mode	Status	Records	Rate limit	Failures	Last sync
Microsoft 365	incremental	Healthy	1,284	4200/5000	0	2mo ago
Microsoft Teams	webhook	Idle	312	5000/5000	0	2mo ago
SharePoint	incremental	Healthy	540	5000/5000	0	2mo ago
Jira	incremental	Healthy	642	920/1000	0	2mo ago
ServiceNow	incremental	Degraded	188	60/200	3	2mo ago
GitHub	webhook	Healthy	967	4800/5000	0	2mo ago
Slack	webhook	Idle	0	5000/5000	0	—
AWS	incremental	Healthy	2,140	5000/5000	0	2mo ago
Azure	incremental	Healthy	1,760	5000/5000	0	2mo ago
Google Cloud	incremental	Failing	0	0/600	7	2mo ago

Permission Scope Review

Requested vs granted vs excessive scopes with least-privilege guidance — procurement/security critical.

Microsoft 365

High riskrisk score 32

Granted

User.Read.All
AuditLog.Read.All
Files.Read.All

Missing (required)

none

Excessive

Files.Read.All

Least-privilege: Revoke "Files.Read.All" — granted but not required.

Jira

High riskrisk score 32

Granted

read:jira-work
read:jira-user
manage:jira-project

Missing (required)

none

Excessive

manage:jira-project

Least-privilege: Revoke "manage:jira-project" — granted but not required.

AWS

High riskrisk score 32

Granted

cloudtrail:LookupEvents
iam:GenerateCredentialReport
s3:GetObject

Missing (required)

none

Excessive

s3:GetObject

Least-privilege: Revoke "s3:GetObject" — granted but not required.

Google Cloud

Low riskrisk score 28

Granted

logging.logEntries.list

Missing (required)

iam.roles.get

Excessive

none

Slack

Low riskrisk score 22

Granted

—

Missing (required)

channels:history
channels:read

Excessive

none

Microsoft Teams

Medium riskrisk score 14

Granted

ChannelMessage.Read.All
Team.ReadBasic.All

Missing (required)

none

Excessive

none

ServiceNow

Low riskrisk score 8

Granted

incident.read
change_request.read

Missing (required)

approval.read

Excessive

none

SharePoint

Low riskrisk score 0

Granted

Sites.Read.All

Missing (required)

none

Excessive

none

GitHub

Low riskrisk score 0

Granted

repo:status
read:org
pull_requests:read

Missing (required)

none

Excessive

none

Azure

Low riskrisk score 0

Granted

Monitor.Read
Directory.Read.All

Missing (required)

none

Excessive

none

Evidence & Event Mappings

Evidence Mappings

External entities → the existing evidence model (trust-compatible).

Connector	Source	Evidence	Trust
Microsoft 365	auditLog	identity access	trust-ready
Microsoft Teams	channelMessage	discussion	trust-ready
SharePoint	document	policy	trust-ready
Jira	issue	governance decision	trust-ready
ServiceNow	approval	approval	trust-ready
GitHub	pull_request	change control	trust-ready
Slack	message	discussion	trust-ready
AWS	cloudTrailEvent	identity access	trust-ready
Azure	activityLog	identity access	trust-ready
Google Cloud	auditLogEntry	identity access	trust-ready

Event Mappings

Source events → the existing observability event model.

Source event	Normalized type	Category	Severity
audit.created	connector.evidence.mapped	evidence	low
message.posted	connector.webhook.received	evidence	info
document.updated	connector.evidence.mapped	evidence	low
issue.transitioned	connector.evidence.mapped	decision	low
change.approved	connector.evidence.mapped	approval	low
pull_request.merged	connector.evidence.mapped	evidence	low
message.posted	connector.webhook.received	evidence	info
iam.access	connector.evidence.mapped	identity	low
role.assignment	connector.evidence.mapped	identity	medium
iam.binding.changed	connector.permission.changed	identity	high

Connector Logs

Connector events normalized into the observability model — a view, not a second log.

Event	Connector	Severity	Outcome	When	Hash
connector.evidence.mapped Mapped Jira issue GOV-218 → governance decision evidence.	conn-jira	low	success	2mo ago	0xCONN-L…0001
connector.sync.completed Incremental sync completed — 24 pull requests.	conn-github	info	success	2mo ago	0xCONN-L…0002
connector.webhook.received Webhook received — channel message in #ai-governance.	conn-teams	info	success	2mo ago	0xCONN-L…0003
connector.sync.started Incremental CloudTrail sync started.	conn-aws	info	success	2mo ago	0xCONN-L…0004
connector.permission.changed IAM binding changed — re-review required.	conn-gcp	medium	success	2mo ago	0xCONN-L…0005
connector.sync.failed Cloud Audit Log sync failed — missing iam.roles.get scope.	conn-gcp	high	error	2mo ago	0xCONN-L…0006
connector.auth.failed OAuth consent not completed.	conn-slack	high	error	2mo ago	0xCONN-L…0007

Connector Reports

Procurement & security documents — reuse the shared report shell.