Governance Service Overview

Governance Service is the platform service behind projects, policies, controls, declarations, reviews, indicators, activity logs, attachments, and credential coordination.

Most users experience Governance Service through Governance Studio. Integrators use it when they need to send governance events, connect automated checks, or integrate platform workflows into another system.

What Governance Service Owns

• Projects and project metadata
• Policies in the Policy Library and applied to projects
• Controls, declarations, reviews, and attached evidence
• Indicators, evaluations, and generated declarations
• Credential issuance and revocation coordination with the Integrity Service
• Report generation coordination with the PDF generation service
• Activity logs

What Governance Service Depends On

Governance Service relies on Auth Service for authentication and authorization, configured object storage for attachments, Integrity Service for credential and lineage workflows, and deployment-provided platform storage for durable state.

If one of those dependencies is unavailable, affected workflows may be hidden, delayed, or return an operational error.

User-Facing Principles

• Project context: Governance data is scoped to the selected project unless a workflow is explicitly organization-wide.
• Roles and permissions: Users can only perform actions allowed by their project or organization role.
• Explainable evidence: Declarations, reviews, attachments, indicators, and credentials should create a record that auditors can understand later.
• Human review: Automation supports the control workflow but does not replace reviewer judgment.

Where to Go Next

• Use the Governance Studio guides for end-user workflows.
• Use the generated API reference for exact request and response shapes.
• Use the deployment guides for platform configuration and operational readiness.