Evidence
Diff history per management group with cryptographic timestamps
Guardrail Ledger Spot Suite app
Guardrail Ledger
The weekly operating system for Azure guardrails, exceptions, and evidence.
What drifted, who approved it, which control is now at risk. Continuous landing-zone drift, policy and RBAC change tracking, exception governance, and packaged monthly evidence for auditors and customers.
Evidence story
What this app proves.
Every product page points to the proof a buyer or auditor expects before rollout.
Evidence
Pre-filled evidence templates for ISO 27017 and CIS Azure
What you get
Product scope in plain language.
No shelfware modules, no bundled mystery fees.
Daily diff of Azure Policy assignments, exemptions, RBAC, and resource-tag drift
Defender for Cloud recommendations and landing-zone blueprint deviations in one feed
Public IP, storage, and Key Vault exposure pattern detection
Exception ledger with owner, expiry, approver, and reason of record
Weekly drift digest with one-click ITSM ticket creation
Monthly evidence packs stored in R2 with signed download URLs
Also in Spot Suite
Add another app when the work expands.
xEvolve xEvolve
$199/moSecure file exchange with a chain of custody auditors accept.
Encrypted workspaces, signed deliveries, per-workspace retention, and a tamper-evident log of every byte. The delivery layer the rest of Spot Suite writes evidence into.
2-month trial
Control Ledger Control Ledger
€149/moMicrosoft control-evidence automation for NIS2, DORA, and ISO 27001.
Turns your Microsoft 365 and Azure telemetry into auditor-ready evidence packs. Coexists with the GRC you already own; replaces the screenshots and spreadsheet chasing.
2-month trial
Access Fabric Access Fabric
€99/moThe missing operator UI on top of Entra access reviews and lifecycle workflows.
Works with Entra, does not replace it. Packages Entra reviews, entitlement management, and lifecycle workflows into auditable business workflows so JML and guest cleanup stop running through spreadsheets.
2-month trial