JS

Trust centre

Evidence integrity and tenant security

IAMCastle Auditor presents Microsoft Entra ID changes as plain-English, independently retained evidence. Every event is tenant-scoped, read-only sourced, append-only, and linked into a SHA-256 verification chain.

Loading trust API

Evidence chain verified

0

Evidence records

Current customer

Not available

Latest hash

SHA-256 evidence fingerprint

Append-only

Storage mode

No evidence delete path

Empty

Graph connector

No write permissions requested

Evidence integrity

Verification statusVerified
Hash algorithmSHA-256
Object coverageWaiting for first ingestion
Latest evidence hashNot available yet
Previous hashNot available yet
Microsoft request IDNot available yet

Read-only Microsoft Graph permissions

AuditLog.Read.All

Read Entra audit events and directory audit trails.

Directory.Read.All

Resolve users, groups, devices, roles, and object identifiers.

Policy.Read.All

Read Conditional Access and identity policy metadata.

Application.Read.All

Read app registrations and enterprise application metadata.