RI

Tool / function

kyc.document.extract

Masking transform enforced at pipeline entry after the July DLP finding.

connected

Calls / 30d

88,402

through the governance gateway

Dependent agents

10

bound by signed manifest

Data classification

Restricted

residency Central India

Controls mapped

2

policies & regulatory controls

Connection manifest

INT-TOOL-04

Vendor
Azure Doc Intelligence
Kind
Tool / function
Authentication
Private link + managed identity
Region / residency
Central India
Last sync
2026-07-26 11:22
Granted scopes
extract, classify

Controls enforced on this connection

POL-001POL-006

Assurance notes

What governance relies on here

  • Identity: Private link + managed identity
  • All traffic is proxied — direct calls from workloads are denied at the mesh.
  • Payloads classified Restricted; DLP recognisers run inline on request and response.
  • Kill switch tested this quarter; revocation propagates in under 30 seconds.