Integrations · connector catalog

One graph. Every system you already pay for.

Zovos is a unified platform that works with the systems you already run. Fifty-four connectors ship in the product. They cover ticketing, identity, documents, AML oversight, vendor ratings, and board and regulator exchanges, so your control library stays in sync without a second source of truth. Each connector below is labeled with its real state in the product.

Catalog54 connectors across 18 categories
Want one prioritized?hello@zovos.ai
Available It runs against the real service today, on a credential you already have.
Coming soon The product carries it as a coming-soon tile. The adapter is still in progress.
By category · 18 categories

What's connected today.

Every entry is a connector that exists in the product today. Nothing here is aspirational. If the connector you need isn't on the list, the fastest way to get it built is to write us.

01

Ticketing & workflow

Issues and findings open as tickets in the system your team already works in. When a ticket closes, the closure flows back to Zovos with the evidence attached. The sync runs both ways, and you connect it with a token you already have.

  • JiraAvailable
  • ServiceNowAvailable
  • Azure DevOps BoardsAvailable
  • GitHub IssuesAvailable
  • GitLab IssuesAvailable
  • Zapier / Make / n8nAvailable
02

Identity & access

SAML 2.0 and OIDC single sign-on come with every tier, with no enterprise upcharge. Group-based RBAC and just-in-time provisioning are included, and SCIM directory sync is available where the IdP supports it.

  • SSO (any SAML 2.0 / OIDC IdP)Available
  • SCIM directory syncAvailable
  • Okta identity control probesAvailable
  • Microsoft 365 posture evidenceAvailable
  • Google Workspace control probesAvailable
03

Notifications & delivery

Approvals and four-eye sign-offs arrive in the channels people actually read. Scheduled exports and file delivery cover everything a channel cannot carry.

  • Slack (incoming webhook)Available
  • Microsoft Teams (webhook)Available
  • Outbound webhooks (HMAC-signed)Available
  • Scheduled Excel / CSV exportsAvailable
  • SFTP deliveryAvailable
  • Slack app for in-message approvalsAvailable
  • Mass notification (Everbridge, AlertMedia, OnSolve)Available
04

Security operations

Zovos forwards audit events to the SIEM your examiners ask about. The events come from an audit log that is append-only at the database.

  • Splunk HECAvailable
  • Generic SIEM (HTTPS / JSON)Available
  • Microsoft SentinelAvailable
05

Document repositories

Pull policy libraries, procedures, and audit evidence from where they already live. Each sync picks up what changed since the last one, tracks versions, and preserves citations. Every connector is built against the provider’s real API, and the app registrations are the last step.

  • SharePoint (Microsoft Graph)Available
  • Confluence CloudAvailable
  • Google DriveAvailable
  • BoxAvailable
  • iManage WorkAvailable
  • NetDocumentsAvailable
06

BSA / AML oversight

The second line gets oversight of the transaction-monitoring stack you already run. That includes alert and case metrics, tuning evidence, and model-validation artifacts. The file-import path works the day you drop a file.

  • Verafin (file import)Available
  • NICE Actimize (file import)Available
  • Abrigo BAM+ (file import)Available
  • Hummingbird (file import)Available
  • Unit21 (API + webhook)Available
07

Board portals & regulator exchanges

File the board package where the directors already read it, and package exam and audit exchanges the way the portal expects them.

  • OnBoard (packaged export)Available
  • Diligent Boards (packaged export)Available
  • FDICconnect (packaged export)Available
  • NCUA MERIT (packaged export)Available
  • BoardEffect (API)Available
  • Confirmation.com audit confirmationsAvailable
08

E-signature

Route policy approvals and attestations for signature. The completion event lands back on the record it belongs to.

  • DocuSignAvailable
  • Adobe Acrobat SignComing soon
09

Third-party risk ratings

Continuous vendor ratings and business data flow into the TPRM register, so residual risk moves when the vendor does. Each requires your own subscription with the vendor.

  • BitSightAvailable
  • SecurityScorecardAvailable
  • RiskRecon (Mastercard)Available
  • Dun & Bradstreet Direct+Available
10

Security & control evidence

Control tests read from the tools that already hold the answer, including vulnerability posture, endpoint coverage, and device compliance. Your own vendor subscription applies.

  • Tenable VMAvailable
  • Qualys VMDRAvailable
  • CrowdStrike FalconAvailable
  • Jamf ProAvailable
11

Regulatory intelligence

These feeds power the radar. They carry rule changes, enforcement actions, control content, and the macro series that move your risk appetite.

  • Secure Controls Framework (bring your own file)Available
  • Rule-change monitoring (Federal Register, eCFR)Available
  • Enforcement tracker (OCC, FDIC, FRB, NCUA)Available
  • FRED macro seriesAvailable
12

Developer & cloud

Source-control evidence and cloud posture run on the same typed and audited surface as everything else.

  • GitHub repo postureAvailable
  • Amazon Web Services cloud configAvailable
Beyond the catalog

A typed, audited API for everything else.

If the integration you need isn't on the roadmap, the API will get you there. Every read and write is scoped, signed, and surfaces in the audit log.

  • AREST + HMAC-signed webhook surfaceAvailable
  • BScoped API tokens · per-tenantAvailable
  • CAudit-log export to SIEMAvailable
  • DPublic OpenAPI specPlanned

If the connector you need is missing, tell us.

Design-partner-requested integrations move to the front of the queue. Write us with the system, the use case, and the volume. You'll hear back within the week.