DriftLedger

DriftLedger is a web app (with optional Slack/Teams bot) that continuously detects “compliance drift” by comparing what your policies and controls claim versus what your cloud and SaaS configurations actually do. Instead of building another evidence repository, it focuses on the gap: misaligned settings, missing approvals, expired access reviews, unmanaged assets, and untracked exceptions. It connects to AWS, Azure, GCP, Okta, Google Workspace, Microsoft 365, Jira, GitHub, and common MDM tools to pull configuration signals and change events. The product generates a control-by-control drift score, creates tickets with exact remediation steps, and maintains a time-stamped drift timeline you can show auditors. It also supports lightweight exception workflows (owner, rationale, expiry) so teams stop “forgetting” risk acceptances. This is a combination traditional + AI app: AI helps map signals to controls and draft remediation notes, but the core value is deterministic detection and traceability.