Governance
Administer identity, authorization, workflows, evidence, compliance and integration policy across Moduvio.
Shared foundation available now. Some bounded policy features are API-administered until a documented UI is released.
What this module does
Governance supplies the shared security and evidence controls every product module depends on. Domain transactions remain code-owned and cannot be created by arbitrary workflow configuration.
Company Administrator, Security & Compliance Officer, controlled-document users, workflow authorities and Auditor.
None. Administration cannot author scripts, SQL, callbacks or arbitrary workflow actions that post stock or bypass custody rules.
Capabilities
Users, roles, sites, classification clearance and maker-checker separation.
Versioned human work and attributable decisions within safe orchestration boundaries.
Immutable documents, malware state, retention, legal hold and auditable links.
Company settings, integrations, notifications, encryption and deployment controls.
Inputs, outputs and handoffs
Company identity, named users, sites, clearance, policy definitions, controlled files and domain audit/outbox facts.
Scoped access, immutable documents, a read-only 45-flow operating catalogue, safe human-workflow definitions, permission-filtered next-action visibility, company policy, auditability and deployment/security controls.
Governance supplies the shared control plane; each business module still owns and validates its own domain commands and records.
Where to work
Named identity, role, site and clearance administration.
/admin/usersImmutable versions, malware state, retention and evidence links.
/documentsSeparate all code-owned operational flows, bounded human definitions, and live instances/tasks.
/admin/workflowsSecurity, evidence, notification, encryption and provider policy.
/admin/settingsInternal-only assessment evidence attached to an exact approved compliance register.
/quality/cmmc-readinessAuthority boundary
None. Administration cannot author scripts, SQL, callbacks or arbitrary workflow actions that post stock or bypass custody rules. Governance supplies the shared control plane; each business module still owns and validates its own domain commands and records.