How Integrations Work
Every integration follows the same lifecycle, regardless of the tool or category.1
Connect
Authenticate with the third-party tool using OAuth, API key, or service account credentials. LowerPlane verifies the connection and saves the configuration securely.
2
Initial Sync
A background job fetches all relevant data from the connected tool. Depending on the integration, this can include user lists, configuration settings, security findings, or asset inventories.
3
Evidence Collection
The sync results are processed, categorized, and stored as evidence artifacts. Each piece of evidence is automatically tagged with the frameworks and controls it satisfies.
4
Tests Run
Automated tests evaluate the collected data against compliance requirements. Test results update control statuses across all applicable frameworks simultaneously.
5
Continuous Monitoring
Based on the configured sync frequency, LowerPlane re-syncs data and re-runs tests to maintain continuous compliance. You are notified when a test status changes.
Integration Categories
LowerPlane organizes integrations into categories based on their function in your compliance program.Cloud Providers
AWS, Azure, GCP, DigitalOcean, Heroku, Cloudflare, Vercel, and more. Monitor infrastructure security and collect configuration evidence.
Identity Providers
Okta, Google Workspace, Azure AD, OneLogin, JumpCloud, Auth0, and more. Verify MFA, SSO, and access controls.
Security Tools
Snyk, Wiz, CrowdStrike, Splunk, Datadog, SentinelOne, and more. Import vulnerabilities, endpoint status, and SIEM data.
HR / Staff Providers
BambooHR, Workday, Gusto, Rippling, ADP, Personio, and 50+ more. Sync employee data for personnel security tracking.
Version Control
GitHub, GitLab, Bitbucket, Azure DevOps. Monitor branch protection, code reviews, and repository security.
Task Management
Jira, Asana, Linear, Monday, ClickUp, Trello. Track change management and remediation workflows.
Communication
Slack, Microsoft Teams, Zoom, Loom. Notification delivery and communication audit trails.
MDM & Devices
Jamf Pro, Kandji, Microsoft Intune, Hexnode. Monitor device compliance and enforce endpoint policies.
Password Management
1Password, Bitwarden, LastPass, Keeper. Bring credential-store accounts into access reviews and prove access is revoked on termination.
Monitoring & Observability
Datadog, New Relic, Sentry, Splunk, Grafana. Collect operational evidence and incident response data.
Background Checks
Checkr, Certn, Veremark. Verify employee screening for compliance requirements.
Security Training
KnowBe4, usecure, Curricula, Hook Security. Track security awareness training completion.
What Integrations Provide
Each connected integration contributes to your compliance program in multiple ways:Integration Status
Each connected integration displays one of three statuses:- Active — The integration is connected and syncing successfully on schedule.
- Inactive — The integration is configured but paused or not yet activated.
- Error — The last sync failed. Check credentials and permissions to resolve.
Sync Frequency
You can configure how often each integration syncs data:
You can trigger a manual sync at any time from the integration detail page, regardless of the configured schedule.
Next Steps
Connect an Integration
Step-by-step instructions for OAuth, API key, and service account connections.
HR Integrations
Detailed guide to connecting and configuring HR/staff provider integrations.