Quick answer
Modern compliance platforms connect to the systems you already run and read the evidence from their APIs. OptiTech integrates with Microsoft 365 and Entra ID, Google Workspace, AWS, Azure, GitHub and GitLab, Jira, Slack and Teams, Intune and Jamf, and CrowdStrike and Defender, plus Swedish business systems like Fortnox and Visma. Each integration feeds controls continuously: MFA coverage, offboarding within 24 hours, backup status, patch levels, admin rights, and logging.
What automated evidence collection replaces
The manual version of compliance evidence is a folder of screenshots assembled the week before an audit: a screenshot of the MFA settings page, an export of the user list, a photo of the backup dashboard. It's slow, it's stale the moment it's captured, and it proves only that the setting was right once.
Integration-based evidence is different in kind:
- Continuous. Checks run on a schedule, so a control that breaks on Tuesday is flagged on Tuesday, not at the annual audit.
- Timestamped and tamper-evident. Every check result lands in an append-only evidence log. See proving your compliance state at a point in time.
- Actionable. A failed check can trigger auto-remediation or a ready-made Jira ticket instead of a note in a spreadsheet.
Example checks per integration
| Integration | Automated checks |
|---|---|
| Entra ID / Google Workspace | MFA coverage, dormant accounts, admin role sprawl, offboarding within 24 hours |
| AWS / Azure | Encryption at rest, public exposure, logging enabled, backup configuration |
| GitHub / GitLab | Branch protection, review requirements, secret scanning |
| Intune / Jamf | Disk encryption, screen lock, patch level per device |
| Fortnox / Visma | Employee register changes driving on/offboarding checks |
All connections use read-only API access wherever the provider supports it; see how evidence collection works without installing agents.
What to verify before you buy
Ask any vendor which of your systems they integrate with natively, whether integrations are included in the plan or priced as add-ons, and whether checks map to the frameworks you need. A long integration list means little if the checks behind it are shallow.
Get a personalized walkthrough of automated compliance for your team. No commitment required.