> ## Documentation Index
> Fetch the complete documentation index at: https://docs.matproof.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Integrations Overview

> Connect your existing tools to automate evidence collection and reduce manual compliance work.

# Integrations Overview

Matproof integrates with the tools your team already uses. Connecting an integration means evidence is collected automatically — no screenshots, no manual uploads, no spreadsheets. Each integration runs on a 24-hour sync cycle by default (configurable per integration), and the evidence collected is mapped directly to the relevant controls in your active frameworks.

## Available integrations

### Cloud infrastructure

<CardGroup cols={2}>
  <Card title="AWS" icon="aws" href="/integrations/aws">
    IAM, CloudTrail, S3 encryption, security groups, KMS rotation, GuardDuty status — read-only via cross-account IAM role.
  </Card>

  <Card title="Microsoft Azure" icon="microsoft" href="/integrations/azure-ad">
    Subscription resources, Defender for Cloud findings, encryption settings, audit logs. Includes the Microsoft Entra ID identity surface.
  </Card>

  <Card title="Google Cloud Platform" icon="google" href="/integrations/gcp">
    IAM policies, Security Command Center findings, encryption keys, audit logs.
  </Card>
</CardGroup>

### Identity & workspace

<CardGroup cols={2}>
  <Card title="Microsoft Entra ID (Azure AD)" icon="microsoft" href="/integrations/azure-ad">
    Identity, MFA, Conditional Access policies, privileged role assignments, risky sign-ins.
  </Card>

  <Card title="Google Workspace" icon="google" href="/integrations/google-workspace">
    User access, MFA enrollment, admin roles, inactive accounts, external sharing policy.
  </Card>
</CardGroup>

### Source control & change management

<CardGroup cols={2}>
  <Card title="GitHub" icon="github" href="/integrations/github">
    Branch protection, PR review enforcement, MFA, Dependabot alerts, repository access lists.
  </Card>

  <Card title="Jira" icon="jira" href="/integrations/jira">
    Change requests, incident records, corrective-action tracking. Per-project mapping.
  </Card>
</CardGroup>

### AI providers (for EU AI Act evidence)

<CardGroup cols={2}>
  <Card title="AI Providers" icon="brain" href="/integrations/ai-providers">
    Anthropic, OpenAI, Hugging Face, Weights & Biases — credential storage for automated AI Act compliance checks against your AI training and inference infrastructure.
  </Card>
</CardGroup>

### HR & people

<CardGroup cols={2}>
  <Card title="Deel" icon="users" href="/integrations/deel">
    Employee directory, contractor records, onboarding/offboarding events. Coming soon — see [/integrations/deel](/integrations/deel).
  </Card>
</CardGroup>

### Security tooling

<CardGroup cols={2}>
  <Card title="Aikido Security" icon="shield" href="/integrations/aikido">
    Vulnerability findings ingested into the unified [Findings](/features/findings) view.
  </Card>
</CardGroup>

### Custom / programmatic

<CardGroup cols={2}>
  <Card title="REST API" icon="code" href="/integrations/api">
    Push evidence, sync data, trigger assessments programmatically. For tools without a native integration.
  </Card>
</CardGroup>

## How integrations work

<Steps>
  <Step title="Connect">
    Authorize Matproof with read-only access to your tool — typically via OAuth, sometimes via API key or cross-account IAM role (AWS).
  </Step>

  <Step title="Sync">
    Matproof pulls configuration and activity data on a 24-hour schedule (configurable per integration). The first sync runs immediately on connection.
  </Step>

  <Step title="Map">
    Collected data is automatically matched to the relevant controls in your active frameworks via the [Frameworks](/features/compliance-frameworks) cross-mapping layer.
  </Step>

  <Step title="Surface">
    Passing checks contribute evidence to controls; failing checks raise items in the unified [Findings](/features/findings) view.
  </Step>
</Steps>

You can also trigger a manual sync at any time from **Settings → Integrations → \[Integration] → Sync now**.

## Permissions philosophy

Every integration uses **read-only** access to the third-party system. Matproof can't modify your AWS resources, edit your GitHub branch protection, change Entra ID policies, or close Jira tickets. The only writes Matproof performs are into its own database.

OAuth scopes and IAM permissions are documented per-integration on the individual integration pages.

## What integrations replace

Without integrations, demonstrating access-control compliance means manually exporting user lists, screenshotting MFA settings, and uploading them every quarter. With integrations, this happens automatically.

| Manual task replaced                    | Integration                                                                      |
| --------------------------------------- | -------------------------------------------------------------------------------- |
| Export user list and MFA status         | Google Workspace / Microsoft Entra ID                                            |
| Screenshot branch protection settings   | GitHub                                                                           |
| Export IAM policy and CloudTrail status | AWS                                                                              |
| Document change approval records        | Jira                                                                             |
| Capture Dependabot vulnerability status | GitHub                                                                           |
| List GCP IAM bindings and SCC findings  | Google Cloud                                                                     |
| Demonstrate AI training-data lineage    | Weights & Biases / Hugging Face (via [AI Providers](/integrations/ai-providers)) |

## Custom integrations

For tools not on the list above, use the [Matproof REST API](/integrations/api) to push evidence programmatically from any system — CI/CD pipelines, custom scripts, internal dashboards, or third-party tools.

Common API use cases:

* Upload penetration-test reports directly from your security scanner
* Push deployment records from your CI/CD pipeline as change-management evidence
* Sync vendor data from your procurement system
* Mirror compliance state from a parent-org system into a subsidiary's Matproof tenant

## Requesting an integration

Don't see your tool? Email [support@matproof.com](mailto:support@matproof.com) with the tool name and your use case. We prioritize integration development based on customer demand. Common requests on the roadmap: Slack, Okta, GitLab, Notion, Microsoft Intune, Jamf.