Manage Non-Integrating Infrastructure Providers

Track compliance for infrastructure services not integrated with Sprinto using workflow checks and evidence-based verification.

Introduction

Not all infrastructure providers support direct integration with Sprinto. For such cases, Sprinto enables you to manage compliance using workflow checks. These checks mimic the behaviour of system checks by requiring periodic evidence uploads to validate your security posture.

You can manually configure workflow checks for encryption, backups, access controls, disaster recovery, and more.

---

Common Use Cases

You should use workflow checks when:

• Your infrastructure provider is not listed in Sprinto’s supported integrations.

• You want to verify controls that require human review or manual evidence.

• You manage infrastructure externally and want to track compliance centrally.

---

Steps to Create Workflow Checks

1. Navigate to Data Library → Infrastructure.

2. Go to the Infra systems tab.

3. Click Add workflow check.

4. Choose one of the following options:

   • From Template – Prebuilt checks like “Database backup is done regularly”

   • Single workflow check – Add a custom check for one system

   • Bulk upload – Add multiple checks at once using CSV

---

Configure Workflow Check Details

For each check, provide the following information:

Field	Description
Title	Name of the compliance check
Description	Why the check is required; what it verifies
Instructions	Steps to perform the check or generate the evidence
Area	Relevant compliance category (e.g., Infrastructure, Access)
Activates on	The date from which the check should begin
Runs on	Frequency of the check (e.g., Monthly, Quarterly)
Assigned to	Person responsible for performing the check
Evidence review	Toggle ON if evidence must be reviewed before passing the check

Once complete, click Add Check.

---

Example Workflow Checks

Check	Purpose	Evidence Required
Database backup is done regularly	Ensure critical data is backed up	Screenshot of backup schedule
Database encryption is enabled	Verify encryption is turned on	Screenshot of encryption setting
Data backup restoration tested	Validate that recovery works	Report from test or exercise
Disaster recovery plan in place	Confirm DR preparedness	Copy of policy and test results
Production server CPUs are monitored	Ensure availability monitoring is enabled	Screenshot of monitoring dashboard

---

After Adding the Check

• The check appears under the Monitoring tab → Active checks.

• Assigned owners receive email reminders when the check is due.

• Owners must upload evidence or mark the check as a special case to move it to “Passing.”

Sprinto resets the check status on the next run date, enforcing ongoing compliance.