Access & Security

Policy Governance

Change tracking, applied to Azure Policy. StratoLens records assignment changes, exemption expirations, and each resource's Azure Policy compliance state on every scan, so you know when a resource fell out of policy compliance and what changed around it.

Start free trial Request a demo

StratoLens is a self-hosted Azure visibility platform. It runs in your own tenant; your infrastructure data never leaves it.

The Problem

Azure shows you current compliance state, but not when things changed or why. That's a problem when auditors come knocking:

No History: You can see that a resource is non-compliant today, but not when it became non-compliant
Silent Modifications: Assignment changes and deletions happen without anyone noticing until there's a gap
Exemption Surprises: Exemptions expire, resources suddenly become non-compliant, and nobody saw it coming
Hard to Prove Response Time: Auditors want evidence you detected and responded to compliance issues promptly

The Solution

Know when policy compliance changed and what caused it:

Assignment Tracking: See added, modified, and deleted assignments, scan over scan
Policy Compliance Transitions: See which resources fell out of (or back into) policy compliance between scans
Exemption Tracking: Track expiration dates so you can remediate before exemptions lapse
Full Hierarchy View: Policy assignments and initiatives from management groups down to individual resources

From the product

Inside Policy Governance

StratoLens Azure Policy compliance view showing a data residency violation: a storage account deployed outside the allowed EU regions, flagged non-compliant — A storage account created outside its EU landing zone's allowed regions, flagged non-compliant against the location policy within days of appearing. Shown with demo-environment data.

A policy exemption that expired silently, with the very next scan recording the resources in its scope flipping to non-compliant.

The estate compliance overview with assignments, exemptions, and compliance state tracked scan over scan across the whole hierarchy.

Product demo

See it in action

Benefits

Key benefits

Detect policy assignment changes (added, modified, deleted) between scans

Identify Azure Policy compliance-state transitions: see when resources became non-compliant

Track exemption expirations to prevent surprise compliance failures

Evidence of timely detection and response for audit reporting

Unified view of assignments, exemptions, and compliance across your entire hierarchy

Risk-based prioritization surfaces non-compliant resources automatically

Use cases

Common use cases

Trace a policy compliance change back to the assignment or exemption change that caused it

Prepare for audits with scan-over-scan policy compliance history

Track exemption expirations and plan remediation before they lapse

Detect unauthorized policy changes that could create governance gaps

Root cause analysis when resources suddenly become non-compliant

Self-hosted

Runs in your tenant. Reads everything, changes nothing.

StratoLens deploys from the Azure Marketplace into your own tenant and scans your subscriptions over read-only Azure APIs. The data behind Policy Governance is collected and stored inside your tenant; there is no StratoLens cloud holding a copy.

Read-only scans via Azure management APIs
Every scan at rest in your tenant, never a vendor cloud
Deployed from the Azure Marketplace in under 15 minutes

Learn more about data residency and security architecture

Want the details?

Explore our documentation to see how Policy Governance works in detail.

View All Features

From the Blog

Azure Policy Compliance at Scale: Why 74% Compliant Means Nothing

A compliance score without history is a vanity metric. Query real policy state with Azure Resource Graph, and add the timeline Azure never shows you.

Read the article

Start your 14-day free trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

When the 14 days end, billing starts on your Azure invoice at your tier. One toggle in Settings turns it off, any time.

Start free trial

Request a demo

Not ready to install anything? Browse the Azure Footguns Database: 97 documented ways Azure quietly costs money or creates risk.