Data Library
Glossary
Understand key terms used in Sprinto’s Infrastructure section to manage and monitor cloud compliance effectively.
Glossary
Introduction
This glossary defines common terms and concepts related to infrastructure monitoring and compliance within Sprinto. Use this as a reference when navigating the Infra Systems, Monitoring, and Workflow Checks interfaces.
| Term | Definition |
| Infrastructure System | A connected cloud account or project, such as an AWS account, GCP project, or Azure subscription. |
| Infra Owner | The designated staff member responsible for resolving compliance tasks for a specific infrastructure system. |
| Entity | An individual infrastructure resource retrieved from a connected system (e.g., EC2 instance, Cloud SQL database). |
| Classification | The process of marking an entity as Production, Not Production, or Unclassified to determine the applicable compliance checks. |
| Production | An entity that processes, stores, or transmits sensitive or in-scope data and requires full compliance monitoring. |
| Not Production | An entity that handles test, staging, or non-sensitive data and is excluded from certain compliance checks. |
| Unclassified | The default state for newly synced entities that haven’t been categorised yet. |
| Smart Classification | A system-wide default classification applied to all entities in a given infrastructure system. |
| Tag-based Classification | A method of automatically classifying entities based on tags or labels defined in the cloud platform. |
| Parent-based Classification | A method where a child entity inherits classification from its parent entity. |
| System Check | An automated check that evaluates the security configuration of an integrated infrastructure system. |
| Workflow Check | A manual compliance check that requires evidence uploads at scheduled intervals. |
| Monitoring Tab | A central dashboard within the Infrastructure section that shows the status of all compliance checks. |
| Active Checks | Checks that are currently enforced and require regular review or resolution. |
| Available Checks | Checks that are defined but not yet enabled or actively monitored. |
| Evidence Review | A manual validation process to confirm that uploaded proof meets compliance standards. |
| Task Drawer | A context-specific panel showing resolution instructions and ownership for failing or due checks. |
| Special Case | A status applied to a check when standard resolution is not possible, accompanied by a justification and optional evidence. |