# How it Works

The Asset Register compiles all assets—both auto-discovered and manually added—into a single dashboard, allowing teams to manage asset-based compliance efficiently.

Here’s how it works:

***

### Step 1: Assets are auto-discovered from integrations

Once you connect your cloud providers (e.g. AWS, Azure), code repositories (e.g. GitHub, GitLab), or HRMS tools (e.g. Rippling), Sprinto automatically discovers your organisation’s digital infrastructure and people.

The following tabs get populated based on integration data:

* **Infrastructure**: EC2s, buckets, containers, and other resources
* **Staff Devices**: Employee laptops and machines
* **Code Repos**: Project repositories hosted on Git platforms
* **People**: Staff directory synced from HRMS or IDP

Each asset comes tagged with metadata like classification (Production/In Scope), owner, and added date.

***

### Step 2: Add assets that are not auto-discovered

Some assets—such as backup generators, CCTV systems, or legacy servers—can’t be automatically pulled via integrations.

You can add them manually from the **Custom assets** tab using either of these options:

* **Individually**: Fill out a simple form with fields like asset ID, name, owner, classification, and group.
* **Bulk upload**: Download the CSV template, fill it with asset details, and upload to import multiple records at once.

***

### Step 3: Classify assets and assign ownership

Whether discovered or added manually, each asset can be:

* **Classified** as *In Scope* or *Out of Scope*
* **Grouped** into categories for reporting
* **Assigned** to an owner for accountability

These actions ensure that only relevant assets are monitored, and the right people are responsible for evidence submissions.

***

### Step 4: Use assets across compliance modules

Once assets are in place, Sprinto links them to compliance modules like:

* **Monitoring checks**
* **Workflow evidence**
* **Risk assessments**

This makes it easy to meet auditor requirements, assign reviews, and respond to incidents with asset-level traceability.