Skip to content
deveca GRC
Integrations

Open to what you already use.

Native Microsoft 365 integration, an MCP server for AI assistants, an open REST/GraphQL API and SSO with Microsoft Entra ID. Atlassian and vulnerability connectors are in active development — no promises we cannot keep.

Available now

Ready today

Communication

  • Slack (notifications, incident alerts)
  • Microsoft Teams (news and notifications)
  • Outlook / Exchange (email triggers)

Microsoft 365

  • SharePoint Online (policy sync, document storage)
  • OneDrive (evidence upload)
  • Microsoft Graph API (native)

AI and MCP

  • MCP server for Claude, ChatGPT and M365 Copilot
  • Scoped API tokens per tenant
  • Full audit trail of every AI action
  • Tenant isolation at protocol level

API and automation

  • REST API with OpenAPI 3.1 spec (Professional+)
  • GraphQL API with tenant-scoped auth
  • Outgoing webhooks (risk, incident, audit events)
  • Incoming webhooks (Enterprise)
  • Stripe billing, checkout and customer portal

Identity and SSO

  • SSO with Microsoft Entra ID
  • MFA (TOTP, WebAuthn)
  • RBAC with field-level rights

Data and import

  • CSV / Excel import for risks, assets, suppliers
  • JSON export of every entity (portable, no lock-in)
  • S3-compatible evidence buckets (DE only)
  • Read replica on request (Enterprise)
In development

A transparent roadmap

These integrations are announced, planned or already being built. We deliberately give no calendar dates — we ship when they are productive and audit-ready.

Further IdPs and HR/CRM

In development
  • SAML 2.0 · OpenID Connect · Google Workspace · LDAP
  • Personio (HR sync, offboarding trigger)
  • Salesforce (CRM connection)

Atlassian bridge

In planning
  • Atlassian Jira (issue sync)
  • Atlassian Confluence (policy mirroring)
  • Smart links and two-way status sync

Vulnerability connectors

In planning
  • Greenbone / OpenVAS
  • Tenable Nessus
  • OWASP Dependency-Check
  • Trivy / Grype (SBOM scans)
  • Automatic CVE/CVSS matching onto assets

CMDB sync

Requested
  • ServiceNow
  • i-doit
  • Two-way asset and owner synchronisation

Need an integration that is not listed? Many systems can be connected through our open REST API in hours — or talk to us and we prioritise by real demand.