Glossary

Understand key terms used in Sprinto’s Infrastructure section to manage and monitor cloud compliance effectively.

Introduction

This glossary defines common terms and concepts related to infrastructure monitoring and compliance within Sprinto. Use this as a reference when navigating the Infra Systems, Monitoring, and Workflow Checks interfaces.

---

Term	Definition
Infrastructure System	A connected cloud account or project, such as an AWS account, GCP project, or Azure subscription.
Infra Owner	The designated staff member responsible for resolving compliance tasks for a specific infrastructure system.
Entity	An individual infrastructure resource retrieved from a connected system (e.g., EC2 instance, Cloud SQL database).
Classification	The process of marking an entity as Production, Not Production, or Unclassified to determine the applicable compliance checks.
Production	An entity that processes, stores, or transmits sensitive or in-scope data and requires full compliance monitoring.
Not Production	An entity that handles test, staging, or non-sensitive data and is excluded from certain compliance checks.
Unclassified	The default state for newly synced entities that haven’t been categorised yet.
Smart Classification	A system-wide default classification applied to all entities in a given infrastructure system.
Tag-based Classification	A method of automatically classifying entities based on tags or labels defined in the cloud platform.
Parent-based Classification	A method where a child entity inherits classification from its parent entity.
System Check	An automated check that evaluates the security configuration of an integrated infrastructure system.
Workflow Check	A manual compliance check that requires evidence uploads at scheduled intervals.
Monitoring Tab	A central dashboard within the Infrastructure section that shows the status of all compliance checks.
Active Checks	Checks that are currently enforced and require regular review or resolution.
Available Checks	Checks that are defined but not yet enabled or actively monitored.
Evidence Review	A manual validation process to confirm that uploaded proof meets compliance standards.
Task Drawer	A context-specific panel showing resolution instructions and ownership for failing or due checks.
Special Case	A status applied to a check when standard resolution is not possible, accompanied by a justification and optional evidence.