Add and Configure Workflow Checks
Add system-specific workflow checks in Sprinto to validate infrastructure security controls through periodic evidence.
Introduction
In addition to automated system checks, Sprinto supports workflow checks that require periodic evidence submissions to validate compliance. These checks are useful when:
Manual validation is needed (e.g., for backup restoration tests)
Evidence must be reviewed periodically
Specific compliance controls are not covered by system integrations
Workflow checks can be applied to both integrated and non-integrated infrastructure systems.
Accessing Workflow Checks
Go to Data Library → Infrastructure.
In the Infra systems tab, select a specific system.
Click Add workflow check.
Methods to Add Workflow Checks
Method
When to Use
From template
Use a prebuilt Sprinto check with default tags
Single workflow check
Manually define one check for a system
Bulk upload
Add multiple checks at once via CSV
(Coming soon) Custom check templates
Build reusable check templates
Configure the Workflow Check
After selecting your method, configure the following fields:
Field
Details
Title
Name of the check (e.g., “Encryption Enabled on Storage”)
Description
Purpose of the check and what it covers
Instructions
Steps the assigned user must follow to perform the check and gather evidence
Check frequency
How often the check runs (e.g., Monthly, Quarterly)
Activates on
When the check becomes active
Assigned to
The staff member responsible for running the check
Evidence review
Toggle ON to route submissions to a reviewer before passing the check
Once complete, click Add Check.
Managing Workflow Checks
Once a workflow check is active:
It will appear under Monitoring → Active Checks
The assigned owner receives reminder notifications
Check status is Due until evidence is uploaded
Evidence can include screenshots, PDFs, documents, or shared links
Reviewers can mark the check as Passing, or request rework
Tips
Use templates to save time when adding common checks like:
Database encryption is enabled
Disaster recovery is tested
Use bulk upload when configuring multiple systems across providers
Always assign a responsible stakeholder to avoid missed deadlines
Last updated