Govern
The controls: the rules the estate must obey, the gates changes must pass, and the evidence that it all happened.
The controls: the rules the estate must obey, the gates changes must pass, and the evidence that it all happened.
In plain terms: how you stop expensive mistakes instead of just reporting them afterwards.
The modules in this section
Policies
The guardrail engine — required tags, blocked resource types, cost thresholds, and budget limits.
Approvals
The central approval queue, decidable from the dashboard, Slack, Teams, or Apex.
Ownership
The map from cloud resources to the teams that own them, with automated inference.
Audit Logs
The immutable record of every action taken — by a person, by Apex, or by automation.
Tag Governance
Tag policy definition and enforcement. The foundation everything else rests on.
FinOps Maturity
An objective score across eight weighted dimensions, computed from measured workspace state rather than a questionnaire, with a roadmap ranked by points gained.
Policies
The guardrail engine — required tags, blocked resource types, cost and risk thresholds, and budget limits, enforced as advisory findings or hard blocks.