Platform · Beta

Architecture decisions, checked against Azure.

The ADR Register keeps each Azure architecture decision on the record, checks your resources against it on a schedule, and shows where the estate has drifted, so governance keeps working after the review meeting ends.

How it works

  1. Record

    One record per decision

    Context, options, decision, consequences, and sources, with a lifecycle from proposed to accepted, superseded, or deprecated. Review dates keep accepted decisions from going stale.

  2. Check

    Checked against Azure

    Each decision gets scopes and checks: an Azure Resource Graph query or an Azure Policy assignment. Accepted decisions are checked every six hours, or on demand, with read-only access.

  3. Decide

    Drift you can act on

    Resources that contradict a decision appear as findings. Approved exceptions cover them until they expire, at most 365 days, and need someone other than the requester to approve them where the workspace has another approver.

What it looks like

Screenshots use fictional demonstration data from a sample tenant, not a client estate.

Decision register listing four Azure architecture decisions with their status; one accepted decision is marked as drifting.
The register: status, review dates, and which accepted decisions are drifting.
A decision's checks against Azure: two subscription scopes, one Resource Graph check, and two violating resources, with the decision history alongside.
A decision checked against Azure: scopes, the check, and its history.
Findings table showing one storage account violating the decision and one covered by an approved exception.
Findings: one resource violating the decision, one covered by an approved exception.

Where it fits

Access and data

  • Checks use the Reader role assigned to the Architecture Logic Apps application; it has no write access to your tenant.
  • Each organization gets its own workspace, isolated from every other workspace.
  • Every decision exports as markdown, so the record stays yours.
  • Beta: access is granted on request after sign-in with your work account.