Integrations
Connect what you already run. Change nothing.
These are the systems Gwenda reads your controls from. Connections are read-only, nothing gets installed on staff devices, and there is no new system of record to migrate to or learn.
Gwenda does not ask you what controls you have. It connects to the systems you already run and reads them (configuration, assignments, records and timestamps), then works out which controls that evidences and where the gaps are.
Which is why the sector systems come first. A cloud console has nothing to say about a fund's segregation of duties; that evidence lives in the registry and the payment workflow. A childcare service's ratios live in rostering, and an aged care provider's clinical governance lives in the care record. Those systems are below.
Availability: Gwenda is in active development and connector availability is changing week to week. Talk to us about the systems you need and we will tell you exactly what is live today.
Fund administration and registry
Where unit registries, investor records and payment authorisations live. This is the segregation-of-duties evidence an operational due diligence review asks for first.
Apex Group
- Unit registry: investor register, holder identification numbers, unit holdings, application and redemption
- AML/CTF onboarding files and identity verification outcomes held on the investor record
- Distribution and unit price calculation records, NAV files and unit pricing error/compensation logs
Citco
- Fund accounting and general ledger records, capital account statements, waterfall and carried interest
- Treasury and payment processing records including four-eyes approval trails for capital calls and
- Investor register and subscription document records
SS&C Technologies
- Unit registry data: holder records, transaction history, distribution and tax component records
- Fund accounting ledgers, NAV packs, pricing exception and error registers
- Investor AML/KYC and screening outcomes stored against the holder record
MUFG Corporate Markets
- Unit and share register, holding balances, holder communications and delivery logs
- Corporate actions, distribution payment and unclaimed money records
- Investor identity verification and AML screening records held at registry
Automic Group
- Investor register and investor portal access logs, including who viewed or downloaded investor data
- Application, redemption and transfer records with supporting identity documents
- NAV, unit price and distribution calculation records
Unity Fund Services
- Investor register, application forms, wholesale/sophisticated investor certification records
- Fund accounting ledgers, NAV and unit price calculations, distribution calculations
- Middle office reconciliations between the manager's loan book and the fund's books
Perpetual Corporate Trust
- Loan-level data submissions with data quality and validation results
- Investor, intermediary and RBA regulatory reporting submissions and their timeliness
- Trust deed compliance, trustee reporting and covenant/trigger testing records
Loan origination and portfolio
Loan files, covenant monitoring, arrears and valuation inputs: the records behind ASIC's private credit principles and a trustee's SPS 530 questions.
Allvue Systems
- Deal pipeline and credit approval workflow records
- Loan-level servicing records: drawdowns, interest accruals, amortisation, fees, principal activity
- Covenant definitions, testing results and breach/waiver history (evidences covenant monitoring controls)
- Valuation and asset marking records with approval trails
Solvas (Alter Domus)
- Loan-level position, cashflow and accrual records for the collateral pool
- Priority-of-payments/waterfall calculation runs and outputs (evidences distribution and payment controls)
- Collateral compliance test results and breach history under Solvas|Compliance
nCino
- Loan and deal records with stage gates, approval routing and credit authority evidence
- Covenant and financial spreading records, and ongoing monitoring tasks
- Document and condition-precedent checklists per facility
Cloudcase
- Credit application records with full workflow history: who submitted, who assessed, who approved, at what
- Automated decisioning rules and their versions, plus manual override records
- Serviceability and affordability calculation inputs and outputs
Sandstone Technology
- Digital onboarding records including identity verification outcomes
- Loan application workflow, assessment and approval records
- Customer channel access and authentication logs
Loanworks
- Loan application and credit decision records with approval hierarchy and timestamps
- Document management repository with version and access history for loan files
- Commission calculation and payment records for brokers and introducers
Cotality RP Data
- Property reports and comparable sales evidence attached to each credit file
- Automated valuation model estimates and confidence scores, with the date pulled
- Portfolio-level revaluation runs supporting periodic LVR recalculation (evidences ongoing security monitoring
PEXA
- Settlement and lodgement records evidencing the mortgage was registered against title, and on what date
- Discharge and release records on repayment
- Trust account and settlement funds flow records
Investor CRM and portals
Onboarding workflow states, investor communications and reporting delivery, with the audit trail attached.
Salesforce Financial Services Cloud
- Investor and prospect records including wholesale/sophisticated investor classification flags and certificate
- Capital raising pipeline, commitments and communications history
- Complaints and dispute records if the internal dispute resolution process is run in CRM
Intapp DealCloud
- Deal pipeline, screening decisions and reasons for pass/decline (evidences investment process discipline)
- Investor (LP) records, commitments, side letter references and communications history
- Conflicts of interest and related-party flags where configured
Juniper Square
- Investor portal document publication and per-investor access/download logs
- Capital call and distribution notice records
- Subscription document and investor onboarding records
Backstop (ION Analytics)
- Investor due diligence questionnaire (DDQ) submissions and responses
- Research notes and manager monitoring records
- Client portal document distribution and access logs
Olivia123
- Completed application forms with timestamps and investor dashboard activity
- Identity verification results per applicant
- Electronic signature audit trails
KYC, screening and financial crime
Customer due diligence files, sanctions and PEP screening outcomes, and the configuration that evidences your AML/CTF program actually operating.
FrankieOne
- Per-customer KYC verification results with the data sources used and match confidence
- Sanctions, PEP and adverse media screening results and alert disposition records
- Beneficial ownership resolution records for corporate borrowers and trustee investors
- Risk scoring outcomes and risk-based onboarding rule configuration (evidences the risk-based approach)
LSEG World-Check
- Screening records per entity: list versions used, match scores, and analyst decisions on each alert
- Ongoing monitoring records showing re-screening against updated list data
- Whitelist/false-positive decisions with reviewer and rationale (evidences alert adjudication quality control)
- Audit trail of who ran what search and when
ComplyAdvantage
- Screening and monitoring alert records with disposition and reviewer
- Risk-based screening configuration: which lists, which fuzzy-match thresholds, which adverse media categories
- Transaction monitoring rule definitions, tuning history and alert outcomes
First AML
- Completed CDD files per investor or borrower entity
- Verification evidence and screening outcomes attached to each file
- Managed-service delegation records and the outsourced CDD compliance programme addendum
GBG greenID
- Verification transaction records per individual: sources matched, documents validated, pass/fail outcome and
- Biometric/facial verification and liveness results
- Watchlist, PEP and sanctions screening hits and their disposition
- Configuration of verification rulesets (which combination of sources constitutes a pass)
IDVerse
- Per-transaction document authentication results and fraud signals
- Biometric match and liveness detection outcomes
- Rejected/failed verification records and the reasons
LexisNexis Bridger Insight XG
- Batch and real-time screening runs with list versions and match results
- Alert case management records: assignment, escalation, decision and rationale
- Screening rule and threshold configuration (evidences calibration of the screening control)
Arctic Intelligence
- The documented enterprise-wide ML/TF risk assessment with inherent risk, control effectiveness ratings and
- The AML/CTF program manual and its version and approval history
- Control gap and remediation action registers with owners and due dates
Childcare and early learning systems
Where enrolments, attendance, incidents and programme documentation live. These are the records that evidence the National Quality Standard.
OWNA
- Enrolment and waitlist records
- Child sign-in/sign-out attendance from the kiosk, used to derive children actually present per room
- Educator rosters, shift patterns, sign-in/sign-out and timesheets
- Ratio monitoring records and out-of-ratio alerts, predicted from attendance and staff qualifications
Xplor Education
- Enrolment records with customisable forms and mandatory documentation requirements
- Digital attendance records and automated CCS/ACCS session submissions
- Bookings, session and gap fee records, occupancy and CCS estimates
- Attachment Hub: child compliance documents with expiry dates and dashboard expiry notifications
QikKids
- Enrolment, waitlist and registration records (via QK Enrol and the My Family Lounge parent portal)
- Session bookings, including casual and permanent booking changes made by families
- Attendance rolls and CCS/ACCS session report submissions to the Child Care Subsidy System
Kidsoft
- Waitlist, registration and enrolment records
- Attendance tracking records and CCS/ACCS session submissions
- Booking records including routine and casual bookings, and parent-initiated bookings via the booking app
Xap
- Enrolment and waitlist records
- Attendance tracking records with real-time reporting
- CCS enrolment and session submissions, and reconciliation against the Child Care Subsidy System
Kangarootime
- Enrolment and waitlist records with customisable enrolment links and open-spot forecasting
- Room-level attendance records
- CCS, ACCS and ISS subsidy records with real-time payment projections
HubHello
- Enrolment records and centralised digital waitlist and enrolment forms
- Electronic sign-in/sign-out attendance records
- Paperless CCS integration: session submissions, Statements of Entitlement and automated adjustments
Harmony Web
- Educator-recorded attendance records and electronic timesheets for children in home-based care
- CCS enrolment and session submissions, and CCS/fee estimate calculations
- Enrolment and family records
Storypark
- Observations, learning stories and planning records tagged to learning outcomes
- Child profiles and portfolios shared with families
- Family communication records and engagement history
Kinderloop
- Dated observation and learning journey posts with photos and video, attributed to the posting educator
- Learning outcome tags (preloaded common outcomes or service-defined)
- Per-child learning journeys and report templates including summative assessments
EarlyWorks
- Individual child observations and learning journeys
- Planning cycle records covering observation, analysis, planning, implementation and evaluation
- Reflections on programme and pedagogy
1Place Childcare
- Completed digital checklists
- Checklist and audit content derived from ACECQA's NQS Assessment and Rating Instrument
- Incident and hazard reports with response and follow-up actions, via the Incident & Hazard Manager
QIPDesk
- Self-assessment records recorded against each of the seven NQS quality areas
- Quality Improvement Plan entries covering identified issues and planned improvements
- Improvement tasks and their completion history
Aged care and home care systems
Care plans, clinical indicators, restrictive practices and reportable incidents: the records the strengthened Quality Standards are assessed on.
AlayaCare
- Visit schedules and clock-in/clock-out records showing which visits were actually delivered
- Client care and service plans built in the Service Planner, mapping visits and rates
- Clinical documentation and progress notes captured in the field via the care worker mobile app
- Funding Episode records by Support at Home pathway
Platinum6 (Leecare)
- Resident assessments and individualised care plans
- Medication management records (P6Med) and pharmacy messaging (P6Pharm Messenger)
- Point-of-care entries captured on mobile devices (P6Mobile)
- Care plan content shared with residents and representatives (P6MyCarePlan)
AutumnCare
- Personalised care plans and clinical assessments spanning admission through activities of daily living
- Clinical indicator data tracked on configurable dashboards
- Incident records, including forms lodged to the Serious Incident Response Scheme (SIRS)
- Risk registers and dignity-of-risk records
Telstra Health Clinical Manager
- Assessment forms and care plans
- Progress notes, alerts and handover reports
- Observation charts and charting data
- Records of evidence toward AN-ACC funding appraisals
eCase
- Single client record combining clinical assessments and resident information
- Individualised care plans
- Medication information accessible through the resident record
- Resident lifecycle, billing and funding records
Manad Plus
- Clinical assessments, care plans and progress notes
- Clinical charting and wellness indicator records
- Incident and adverse event records
- AN-ACC records and funding events
Person Centred Software mCare
- Person-centred care plans
- Risk assessments
- Care notes and progress notes captured at the point of care
- Daily records of care delivered against planned care
Lumary AC
- Client records and care plans with service delivery tracked against goals
- Workforce rosters and scheduling records, with SCHADS award interpretation applied
- Progress notes and clinical documentation
Visualcare
- Shift records matched directly to the client's care plan, used to reduce claim errors
- Participant profiles holding care needs, preferences, availability and funding details
- Worker skills, qualifications and compliance status used to filter and match staff to shifts
CarelinkPlus
- Centralised client records and case management history across the client lifecycle
- Rostering and resource management records with award interpretation
- Client budgets, package funds and financial tracking per client
TurnPoint
- Client records spanning funding streams, with care plans and service agreements
- Award-compliant shift rosters with staff qualification and compliance tracking on allocations
- Service notes and visit sign-off captured at the point of care via the worker mobile app
ShiftCare
- Rosters plus mobile clock-in/clock-out records from the support worker app
- Client care plans, documentation and progress notes surfaced to workers in the app
- Staff documents and compliance records
CareVision
- Individual care and service plans with version control, change tracking and archived plan history
- Care and case records including allergies, nutrition, preferences, contacts, goals and action plans
- Condition and treatment plans, emergency plans and health information available at the point of care
Brevity Care Software
- Client records holding personal, medical and family history
- Care plans and client medication management records
- Employee records tracking training, qualifications, certifications and their expiry dates
Comm.care
- Client records and customised care plans
- 'Circle of care' collaboration records across staff, clients, family and friends
- Rostering records
Webstercare MedSig
- Electronic signing records for each medication dose administered
- Resident medication profiles with dosage and round times
- Clinical monitoring data recorded on the health dashboard
MediMap
- Electronic medication administration records (eMAR) and medication charts
- Medication administration history and audit trail
- Summaries of PRN medications given in the last 24 hours
Telstra Health Medication Management
- Electronic medication charts updated by prescribers through MedPoint as part of the eNRMC process
- Medication administration information captured at the point of care (MedMobile)
- Electronic medication profile for each resident
Rostering, workforce and HR
Educator-to-child ratios, care minutes, worker screening and clearance expiry, plus the joiner, mover and leaver record every access review depends on.
Deputy
- Rostered hours against required coverage
- Qualification and clearance flags on rostered staff
- Timesheet records supporting care minutes
Humanforce
- Rostered hours against required coverage
- Qualification and clearance flags on rostered staff
- Timesheets supporting care minutes
Employment Hero
- Start and termination dates for access reconciliation
- Certification and clearance expiry
- Completed mandatory training
Tanda
- Rostered versus actual hours worked
- Timesheet and attendance records
ELMO Software
- Employee records and departure dates for access reconciliation
- Mandatory training completion
- Onboarding and offboarding checklists
foundU
- Onboarding records per worker
- Published rosters and shift offers across multiple locations
- Rostered hours with wage-cost visibility, and care minute monitoring on the aged care roster
Easy Employer
- Rosters generated against staff availability, leave, skills and qualifications
- Skills and qualification register used to match workers to shifts
- Award, EBA and custom agreement pay rate application records
UKG Pro Workforce Management
- Rosters and schedules across facilities, including staff self-service shift swaps and open-shift pick-up
- Time and attendance / worked-hours data supporting care hour and RN coverage reporting
- Staffing-level and coverage data used to fill shifts against required skill mix
fit2work
- Nationally Coordinated Criminal History Check results and issue dates
- VEVO visa and work entitlement check results
- Qualification, employment history and other verification check results
Kinatico CVCheck
- Accredited national police check results and issue dates
- NDIS Worker Screening Clearance records collected and recorded as part of onboarding
- VEVO visa and work entitlement check results verified with the Department of Home Affairs
BambooHR
- Employment status and departure dates
- Training completion records
Rippling
- Employment status and assigned devices
- Application access provisioning and deprovisioning
Workday
- Worker records and termination dates
- Organisational hierarchy for access reviews
- Completed compliance training
Learning and mandatory training
Who has completed what, and when it lapses.
Ausmed
- Mandatory training requirements set per role, team, facility or provider
- Individual course completion records with completion dates
- CPD hours logged per worker
Altura Learning
- Course completion records against mandatory compliance topics
- Mandatory training allocation per worker and per role
- Course progress and assignment tracking
etrainu
- Course enrolment and completion records per educator or worker
- Child safe and child protection training completions mapped to the National Principles for Child Safe
- Certificates of completion and issue dates
Go1
- Course completion and progress records per learner
- Compliance training assignments by role and playlist
- Learning activity and reporting/insights data across the workforce
ECA Learning Hub
- Module, webinar and webcast completion records per educator
- Certificates of completion
- Subscription and enrolment records per service or per educator
Board and governance
Approved minutes, resolutions and conflicts registers, the records that evidence governing-body oversight, from s912A to the AML/CTF Act's board accountability.
Diligent
- Board and committee papers, agendas, minutes and resolutions with version history
- Director attendance records and voting/consent records
- Conflicts of interest and related-party declarations register
- Entity register: directors, officeholders, shareholdings, registered addresses and ASIC filing status across
BoardPro
- Meeting agendas, board packs and approved minutes with approval and sign-off records
- Action item register with owners and completion status (evidences follow-through on board directions)
- Interests/conflicts register
- Document repository access records
Complii
- Section 708 sophisticated investor certificates and their expiry status per investor
- Offer and bid records per capital raising with who was offered what and when
- Adviser/representative authorisation and training records
Incident, feedback and risk
Where reportable incidents, complaints and risk registers live, including the SIRS workflow aged care providers are held to.
RiskMan
- Incident records with type, severity, date/time of occurrence and date notified
- Feedback and complaints records with acknowledgement, response and closure dates
- Enterprise risk register entries with controls, ratings and treatment actions
- Root cause analysis and investigation records
Riskware
- SIRS incident records with reportable-incident classification and severity categorisation
- Clinical incident records
- Workplace health and safety incident and hazard records
Protecht.ERM
- Clinical and care-related risk register entries
- Incident records including reportable-incident workflow aligned to SIRS
- Complaints and feedback records
Identity and access
Microsoft Entra ID
- Privileged role assignments
- Conditional access policy and its exclusions
- MFA registration and enforcement
- Joiner, mover and leaver events
Okta
- Sign-on policies and MFA factors
- Administrator assignments
- Application assignments and access reviews
- Deactivation timing against HR records
Google Workspace
- Super admin accounts
- Two-step verification enforcement
- External sharing of files and drives
- Third-party OAuth grants
JumpCloud
- Directory user and group membership
- MFA enforcement
- Device-to-user binding
1Password
- Shared vault membership
- Credential age and rotation
- Recovery and administrator roles
Auth0
- Authentication policy for customer-facing applications
- MFA enrolment and enforcement
- Tenant administrator assignments
AWS IAM Identity Center
- Permission set assignments across accounts
- Federated access paths
- Session duration policy
CyberArk
- Privileged account vaulting and checkout records
- Session recording coverage
- Standing versus just-in-time privilege
Duo Security
- MFA enrolment and device trust posture
- Bypass codes and policy exemptions
- Authentication failures and lockouts
Ping Identity
- Federation and single sign-on policy
- MFA factor enforcement
- Privileged administrator assignments
Cloud platforms
Amazon Web Services
- IAM roles, policies and root account MFA
- Public S3 buckets and unencrypted volumes
- Security group exposure
- CloudTrail logging and retention
- Backup coverage and restore tests
Microsoft Azure
- Subscription role assignments
- Storage account public access and encryption
- Network security group rules
- Diagnostic logging and retention
Google Cloud
- IAM bindings and service accounts
- Bucket exposure and encryption keys
- Firewall rules
- Audit log configuration
Endpoint and device management
Microsoft Intune
- Operating system versions and patch level
- Disk encryption state
- Compliance policy results
- Application control configuration
Jamf
- macOS version and update status
- FileVault encryption
- Configuration profile enforcement
CrowdStrike
- Sensor coverage against the device inventory
- Detection and prevention policy
- Unresolved detections
Microsoft Defender for Endpoint
- Onboarded device coverage
- Attack surface reduction rules in force
- Vulnerable software inventory
Automox
- Patch policy and compliance per device
- Time to patch after vendor release
- Devices missing critical updates
Kandji
- Device compliance and OS currency
- Encryption and screen lock enforcement
Mosyle
- Apple device compliance state
- FileVault encryption enforcement
- Update deferral and enforcement policy
SentinelOne
- Agent coverage against the device inventory
- Detections and their resolution state
- Policy enforcement per device group
VMware Workspace ONE
- Device compliance and encryption state
- Operating system version distribution
- Conditional access posture
Source control and delivery
GitHub
- Branch protection and required reviews
- Pull requests merged without review
- Repository access and outside collaborators
- Secret scanning and dependency alerts
GitLab
- Merge request approval rules
- Protected branches and push rules
- Pipeline and deployment history
Azure DevOps
- Pull request approval policy
- Pipeline and release approvals
- Repository and project permissions
Snyk
- Dependency and container vulnerabilities by severity
- Fix SLA adherence
- Projects with no scanning configured
Bitbucket
- Branch permissions and merge checks
- Repository access and external collaborators
- Deployment history
CircleCI
- Pipeline configuration and approval steps
- Who can trigger a production deployment
- Deployment history
Semgrep
- Static analysis findings and triage state
- Rules enforced in continuous integration
SonarQube
- Quality gate results per project
- Security hotspots awaiting review
- Projects bypassing the gate
Security tooling
Wiz
- Cloud misconfiguration and exposure findings
- Combinations of risk across accounts
- Coverage across connected cloud accounts
Tenable
- Vulnerability findings by severity and age
- Scan coverage against the asset inventory
- Remediation SLA adherence
Cloudflare
- WAF and rate limiting rules
- Zero Trust application access policy
- TLS configuration and certificate expiry
Proofpoint
- Email threat protection policy
- DMARC, SPF and DKIM enforcement
- Quarantine and user-reported phishing
AWS Secrets Manager
- Secret rotation configuration
- Access policy per secret
- Secrets never rotated
HashiCorp Vault
- Secret access policy and audit trail
- Secret rotation and lease expiry
- Who holds root or unseal capability
KnowBe4
- Security awareness training completion and currency
- Phishing simulation results by team
Mimecast
- Email security and attachment handling policy
- Impersonation protection settings
- Archive retention configuration
Phriendly Phishing
- Security awareness training completion and currency
- Phishing simulation results by team
Qualys
- Vulnerability and configuration compliance scans
- Asset coverage and unscanned hosts
- Patch remediation status
Zscaler
- Zero trust access policy per application
- Traffic inspection coverage
- Users bypassing inspection
Logging, monitoring and response
Microsoft Sentinel
- Connected data sources and coverage gaps
- Analytics rules and incident closure times
- Log retention settings
Splunk
- Log source coverage and ingestion gaps
- Alert rules and their firing history
- Retention configuration per index
Datadog
- Monitor coverage and alert routing
- Log retention and audit trail
- Who can modify monitors
Elastic Security
- Detection rules and their coverage
- Log retention and index lifecycle
PagerDuty
- On-call coverage and escalation policy
- Incident acknowledgement and resolution times
- Services with no responder
Sumo Logic
- Log ingestion coverage by source
- Retention policy per collection
Backup and recovery
Veeam
- Backup job success and failure history
- Retention and immutability settings
- Records of tested restores
AWS Backup
- Backup plans and resource coverage
- Vault lock and retention settings
- Restore job history
Azure Backup
- Protected resources and policy assignment
- Retention and soft delete settings
- Restore history
Druva
- Backup coverage per workload
- Retention configuration
- Restore history
Rubrik
- Protected workload coverage
- Immutability and retention policy
- Recovery testing history
Accounting and finance
Xero
- Chart of accounts, journals and bank reconciliation records
- Payment batch approval records and user permission levels (evidences segregation of duties over payments)
- Bank feed connections and reconciliation exceptions
MYOB
- General ledger, journals and bank reconciliations
- Payroll records including superannuation guarantee and PAYG withholding evidence
- User roles and approval limits
Oracle NetSuite
- Multi-entity consolidated ledgers and intercompany elimination records
- Approval routing and delegation of authority configuration for purchase orders and payments
- Bank and cash management records including payment file generation and approval
Microsoft Dynamics 365 Finance
- General ledger and consolidation records
- Segregation-of-duties rule configuration and violation reports (Dynamics has a native SoD ruleset
- Approval workflow definitions and approval history
Collaboration and documentation
Microsoft 365
- Mailbox and SharePoint sharing
- Data loss prevention policy
- Retention and deletion policy
- Office macro configuration
Microsoft SharePoint
- Site and file sharing permissions
- External sharing links
- Retention labels and policy
Atlassian Confluence
- Policy pages and their last review date
- Page permissions and public spaces
- Acknowledgement of current versions
Ansarada
- Per-user and per-document access logs showing exactly who viewed, downloaded or printed which document and
- Permission and user group configuration, including expiry and revocation of external party access
- Q&A workflow records from due diligence (evidences the diligence process was performed)
Datasite
- Per-user and per-document access logs showing exactly who viewed, downloaded or printed which document and
- Permission and user group configuration, including expiry and revocation of external party access
- Q&A workflow records from due diligence (evidences the diligence process was performed)
Annature
- Signature audit certificates showing signer identity, IP address, timestamp and document hash
- Identity verification results where the eSign flow includes IDV
- Envelope and recipient routing configuration (evidences that documents went only to authorised signers)
Google Drive
- External sharing and link exposure
- Shared drive membership
- Retention rules
Notion
- Policy and procedure currency
- Workspace sharing and guest access
Service desk and change
Jira
- Incident records with triage and closure times
- Change approvals
- Remediation tasks and their owners
ServiceNow
- Incident and change records
- Approval workflow evidence
- Asset and configuration data
Freshservice
- Change approvals and advisory board records
- Incident resolution times
- Asset and configuration records
Communications
Microsoft Teams
- External and guest access
- Retention and eDiscovery policy
- Installed applications and their permissions
Slack
- Workspace admin roles
- External and shared channels
- Installed applications and their scopes
Running something that isn't listed?
Most systems expose the configuration Gwenda needs. Tell us what you use and we'll tell you what it can read.