Documentation / enterprise
Enterprise evidence with a clear boundary.
A practical guide for teams that need organization-scoped evidence, accountable access, governed machine credentials, and an honest audit review workflow.
reviewable evidence · accountable access
01 / evidence
Evidence governance
Keep the source, confidence context, and follow-up visible as evidence moves through reconciliation.
CSV sources and opt-in Collector observations feed the reconciliation workflow. Reconciled values retain source lineage, confidence drivers, and confidence bands, while conflicts and next actions remain reviewable instead of disappearing into a final score.
02 / accountability
Organization access and accountability
Make the organization boundary explicit before inviting people or reviewing product data.
AssetSentinel uses OWNER, ADMIN, and MEMBER roles. Organizations can manage invitations and access requests, verified domains, role changes, ownership transfer, and member departure handling. Organization identity comes from active membership, and the product surfaces keep their normal access checks for the signed-in organization.
03 / administration
Administrative controls
Use the administrative surfaces to shape organization taxonomy, source policy, and review cadence.
Organization settings cover confidence-decay cadence and thresholds plus source-tier controls. Departments & Teams provide the organization taxonomy; the relationship graph provides navigation through those relationships; ingest-run history records reconciliation activity; and the decay page shows the persisted confidence-decay summary. That decay panel is not a general scheduler-delivery or failure-history monitor.
04 / machine access
Collector and credential governance
Treat machine evidence as a governed, opt-in input with a clear credential lifecycle.
The opt-in Collector uses HMAC-authenticated machine endpoints. The credential resolves the organization, enrollment establishes the Collector, and heartbeat and observation calls add evidence to the same reconciliation workflow. Operators can rotate or revoke credentials; only an OWNER can decommission a Collector, while its host and audit history are retained. The Collector is not real-time monitoring.
05 / audit review
Audit review and evidence packet
Assemble a reviewable record without overstating what the product certifies.
Asset detail surfaces let reviewers inspect lineage, confidence, and timeline context. Administrators can download an organization-scoped evidence packet and export the inventory as CSV. The admin audit log is a paginated JSON feed for the rolling 90-day window. AssetSentinel does not claim a compliance certification: an evidence packet is an evidence summary, and the JSON feed is not a dedicated downloadable audit-log CSV.
Keep exploring
The rest of the evidence path.
Back to documentation
Return to the Docs chooser for onboarding, workflow, administration, and API guidance.
Existing workflowOpen audit readiness
Use the existing admin evidence packet workflow when you are ready to assemble a review summary.