ArchTrace

ArchTrace is a web app (with optional desktop agent) for security architecture and GRC teams who are tired of stale diagrams and painful audits. It connects to cloud accounts (AWS/Azure/GCP), IAM, CI/CD, and ticketing to automatically map key architectural controls (network segmentation, identity boundaries, encryption, logging) to specific compliance requirements (SOC 2, ISO 27001, HIPAA). Instead of generating generic reports, it produces an evidence trail: what changed, when, who approved it, and which requirement it impacts. The app flags “architecture drift” when reality diverges from the approved reference architecture and opens a workflow to document risk acceptance or remediation. It’s not a silver bullet—coverage will be partial at first—but it can eliminate weeks of manual evidence gathering and reduce audit surprises by making architecture a living, verifiable artifact.