DEMO TENANTOperator-side data (staff, contacts, calendar, training, grants, complaints, SAR, four-eyes reviews) is illustrative — not a real Greentube record. Connector output, evidence-ledger anchors, RFC 3161 timestamps, Postgres RLS, regulator-source ingestion and LLM extractions are the real machine. Rows marked demo are seeded fixtures.
Georg Gubo
MGA · UKGC · ADM · RO-ONJN · SK-MFSR · DGOJ · GGL · SPI · NJ-DGE · MI-MGCB · PA-PGCB

Connectors

Read-only adapters into the operator's stack. 26/26 healthy · 0 live · 26 mock

Available integrations (one-click OAuth)

Jira Cloud
Ticketing · Atlassian

Auto-create a Jira issue for every high/critical KURAL finding. Bi-directional status sync (coming in PR7). 3LO OAuth, tokens encrypted at rest.

Connected integrations (1 · OP-GREENTUBE)

SoftSwiss PAMconnected
Player Account Mgmt · SoftSwiss
connected 6/2/2026, 12:56:25 PM
last sync · ok 536ms
7/28/2026, 12:18:46 AM · 115 rows
synced 115 rows, 0 new offerings

Status

ConnectorEvidence typesModeStatusLatencyDetailAction
aml-complyadvantageaml_eventmockok245msmock mode (no ComplyAdvantage secret bundle)
aml-featurespaceaml_eventmockok245msmock mode (no Featurespace bundle)
cloud-awsinfra_configmockok22ms
doc-sharepointdoc_presence, doc_field_match, policy_attestationmockok248msmock mode (no SharePoint secret bundle)
hr-bamboohrtraining_recordmockok16ms
idp-entrainfra_configmockok240msmock mode (no Entra secret bundle configured)
kyc-gbgkyc_eventmockok248msmock mode (no GBG secret bundle)
kyc-jumiokyc_eventmockok248msmock mode (no Jumio secret bundle)
kyc-sumsubkyc_eventmockok250msmock mode (no Sumsub secret bundle)
kyc-veriffkyc_eventmockok249msmock mode (no Veriff secret bundle)
pam-everymatrixpam_query, payment_event, game_metadata, rg_eventmockok263msmock mode (no EveryMatrix secret bundle)
pam-genericpam_query, payment_event, game_metadata, rg_eventmockok12msmock (generic PAM — no live adapter)
pam-openbetpam_query, payment_event, game_metadata, rg_eventmockok251msmock mode (no OpenBet bundle)
pam-playtechpam_query, payment_event, game_metadata, rg_eventmockok252msmock mode (no Playtech IMS bundle)
pam-softswisspam_query, payment_event, game_metadata, rg_eventmockok256msmock mode (no SoftSwiss secret bundle)
rg-cruksrg_eventmockok243msmock mode (no cruks secret bundle configured)
rg-gamstoprg_eventmockok244msmock mode (no GAMSTOP secret bundle configured)
rg-lugasrg_eventmockok242msmock mode (no lugas secret bundle configured)
rg-mindwayrg_eventmockok242msmock mode (no Mindway secret bundle)
rg-rofusrg_eventmockok243msmock mode (no rofus secret bundle configured)
rg-ruarg_eventmockok243msmock mode (no rua secret bundle configured)
rg-spelpausrg_eventmockok244msmock mode (no Spelpaus mTLS bundle configured)
scm-githubinfra_configmockok239msmock mode (no GitHub secret bundle)
ticket-freshserviceticket_logmockok241msmock mode (no Freshservice bundle)
ticket-servicenowticket_logmockok241msmock mode (no ServiceNow bundle)
ticket-zendeskticket_logmockok245msmock mode (no Zendesk secret bundle)

How to enable a live connector

Connectors are read-only adapters into an operator's existing tooling — PAM, KYC, AML, document store, helpdesk, HRIS, cloud infra. They have two modes: mock returns deterministic sample data so the engine and UI can be demoed without operator credentials; live reads from the actual vendor API.

SharePoint is the first connector with a live mode. Set these env vars on the API process to flip it from mock to live:

SHAREPOINT_TENANT_ID="<azure-ad-tenant-id>"
SHAREPOINT_CLIENT_ID="<app-registration-client-id>"
SHAREPOINT_CLIENT_SECRET="<client-secret>"
SHAREPOINT_SITE_ID="<sharepoint-site-id>"
SHAREPOINT_DRIVE_ID="<document-library-drive-id>"
# Required Microsoft Graph permissions (admin-consented):
#   Sites.Read.All (or Sites.Selected for tighter scope)
#   Files.Read.All