All systems operational. No incidents in the last 90 days.
One GitHub org member/outside collaborator, or one Entra user/guest — counted per connected system in your latest review cycle. App secrets and privileged role rows ride along for free.
Read-only: Members (read), Administration (read) for 2FA/outside collaborator status. If you enable one-click revoke, it also needs Members (read & write).
Application (not delegated) Graph permissions: User.Read.All, AuditLog.Read.All (for last sign-in), Application.Read.All, and RoleManagement.Read.Directory — all read-only, admin consent required once.
Their items stay pending and block the cycle from closing. Resend their magic link from the cycle page, or reassign the item to someone else.
Each closed cycle is hashed (SHA-256) together with the previous cycle's hash, like a blockchain. Edit any historical record and the chain verification on the evidence page will show exactly where it broke.
From your first payment, you have 30 days to click "Refund & cancel" in Billing — no form, no call. We refund the latest invoice via Stripe and cancel immediately.
Yes — demo mode seeds a realistic fake org and tenant so you can click through the entire flow, including closing a cycle and generating an evidence pack, before connecting anything real.