Integration documentation that stays current

TrueStateRegistry discovers the integrations in your configured Azure and Azure DevOps scope and regenerates the catalog, diagrams and change history on every deploy. Developers complete one small, policy-validated manifest.

One table with the integrations in your scope

The catalog lists every integration with its flow, owner, criticality, data classification and governance status. Sortable, current as of your last deploy. It’s the answer to “what do we actually run?” a question most teams can’t answer without a week of digging.

Integration Catalog in TrueStateRegistry listing each integration with criticality, source, target, classification, owner and status
Governance Dashboard in TrueStateRegistry showing governed, incomplete and ungoverned counts, data classification exposure, criticality and open governance issues

The one screen a CISO or auditor reads first

Every integration gets its own page with real diagrams

An architecture diagram drawn with actual Azure service icons, and a message-flow sequence discovered from the Logic App workflow itself. Plus the business purpose, technical notes, sample payloads, and links to the runbook. Generated, not drawn by hand.

Integration page in TrueStateRegistry with an architecture diagram and a message-flow sequence diagram
Change history in TrueStateRegistry showing date, author, approver, pull request, ticket and change for each commit

Who changed it, when, and who approved it

How it works

Live in three steps, then automatic

Step 1

Add one pipeline to your Azure DevOps project and point it at your resource groups and repos. No platform to host, no agents.

Step 2

It discovers your Logic Apps, Functions and repos, and opens a pull request with draft manifests. About five minutes each to complete.

Step 3

It runs on every deploy, regenerates the catalog, dashboard, diagrams and pages, and flags anything ungoverned.

Runs where your data already lives

In your tenant

Everything runs in your Azure environment. Customer data sent to TrueStateRegistry-hosted services is zero. No telemetry, no licence-server calls.

Keeps secrets out of its output

It does not read Key Vault, app settings or access keys. Every published page, diagram and CSV passes through redaction: known secret patterns and internal hostnames are replaced. You can also set the build to fail when one is detected.

Least privilege

Read-only on Azure: Reader on the resource groups in scope, and read access to the repos. By default it writes only your wiki pages and pull requests for new manifests.

Verifiable

Every page carries the build ID, commit SHA and timestamp that produced it.

FAQs

One small YAML file per integration. The pipeline regenerates everything else.

About five minutes and auto-scaffold pre-fills a stub for every discovered resource.

An Azure DevOps pipeline. Developers only ever edit the manifest.

Your tenant only. Nothing is sent to us.

No. This page explains what TrueStateRegistry gives integration teams. Setup instructions are shared during the pilot.

What setup looks like

Requirements

  • An Azure DevOps project with Wiki enabled, and someone with Project Administrator rights for the setup
  • A YAML pipeline for TrueStateRegistry
  • Reader on the resource groups in scope and read access to the repos, through the pipeline’s service connection

Example manifest

The eight mandatory fields, plus the business owner the default governance policy asks for.

integrationId: contoso-orders-to-crm
name: Contoso Orders to CRM
criticality: medium
dataClassification: internal
owners:
  supportContact: integrations@contoso.example
  businessOwner: Head of Sales
systems:
  source: Contoso Orders
  target: Contoso CRM
description:
  business: Sends confirmed orders to the CRM.

What gets written

  • Wiki pages: the catalog, the governance dashboard and one page per integration with its change history
  • A dated ZIP and CSV as a pipeline artifact

Try it on your own estate. Free for 30 days.