Governance Service Overview

Governance Service is the platform service behind projects, policies, controls, declarations, reviews, indicators, activity logs, attachments, and credential coordination.

Most users experience Governance Service through Governance Studio. Integrators use it when they need to send governance events, connect automated checks, or integrate platform workflows into another system.

What Governance Service Owns

• Projects and project metadata.
• Policy library records and policies applied to projects.
• Project controls, declarations, reviews, and review outcomes.
• Evidence attachments and activity logs.
• Project indicators, indicator applications, evaluations, and generated declarations.
• Credential issuance and revocation coordination with Integrity Service.
• Report generation coordination with the PDF generation service.

What Governance Service Depends On

Governance Service relies on Auth Service for authentication and authorization, configured object storage for attachments, Integrity Service for credential and lineage workflows, and deployment-provided platform storage for durable state.

If one of those dependencies is unavailable, affected workflows may be hidden, delayed, or return an operational error.

User-Facing Principles

• Project context matters. Governance data is scoped to the selected project unless a workflow is explicitly organization-wide.
• Roles matter. Users can only perform actions allowed by their project or organization role.
• Evidence should be explainable. Declarations, reviews, attachments, indicators, and credentials should create a record that auditors can understand later.
• Automation supports the control workflow but does not replace reviewer judgment.

Where to Go Next

Use the Governance Studio guides for end-user workflows. Use the generated API reference for exact request and response shapes. Use the deployment guides for platform configuration and operational readiness.