About the platform
What can I organize in Blugreen?
Systems, owners, access information, data protection controls, AI uses, evidence requests and actions. See how these areas connect.
Do I need a technology team to start?
Start with the assessment in business language and gather existing company knowledge. Technical checks and corrections may require your team, suppliers or a specialist.
How does online asynchronous collection work?
A request identifies questions, owner and deadline. Save a draft on the server, return later, submit references and attachments, and add information when review requests changes.
Which collection integrations are available?
Metadata collection is available for GitHub.com and GitLab.com with authorized connections. GitHub branch protection queries may require additional permissions. Information unavailable from a provider remains uncollected and can be completed through the form.
Can I receive notices with the platform closed?
Notices are available in the platform. Email summaries depend on service activation, verified account email and each user's company-specific preference. Push notifications are not yet available.
Does Blugreen automatically monitor every AI tool?
The AI area organizes reported uses, data categories, rules and human review. It does not automatically monitor every tool or team activity.
Assessments and deliverables
Which dimensions can be assessed?
Technology and data inventory; identity and access; applications and APIs; storage and lifecycle; governance; and personal data protection. Explore each dimension's content.
Is penetration testing included automatically?
No. Offensive testing requires scope, authorization and a responsible professional. Recording information or scope in the platform does not initiate these tests.
Which deliverables can an assessment include?
Depending on scope, work may include an inventory, flow map, technical findings, evidence matrix, executive report and action plan. The proposal defines deliverables and included assets.
Does GDPR apply to my company?
Screening organizes links between operations and the EU, including establishment, goods or service offerings and behavior monitoring, according to context. Conclusions require specialist analysis. Understand what information to gather.
What is the difference between diagnosis and assessment?
The initial diagnosis gathers declared information and guides priorities. Assessment explores a defined scope, verifying evidence and, where included, performing authorized technical tests.
Evidence and corrections
Which files can be attached?
PDF, PNG, JPG, TXT, CSV and JSON, up to 2 MiB per file and 8 files per request. Initial storage is limited to 32 MiB per company. Access requires authentication and request permissions.
Is an attached file already considered verified?
No. File integrity and content review are different stages. Attaching a file or submitting an answer does not, on its own, prove control effectiveness or correction of a finding.
How do corrections and retesting work?
The plan records the owner, deadline and correction evidence. Review or retesting records a new observation linked to previous context. Technical services, corrections and retests are defined in scope; appropriately independent professionals participate where needed.
Does the platform automatically change connected systems?
There is no generic system write access. Requiring a successful pipeline in GitLab.com uses a specific proposal and independent approval. External execution depends on activation, validation, sufficient connection permissions, independent approval and confirmation of the exact operation.
Scope and contracting
Does assessment certify compliance or guarantee no risks?
No. Technical assessment describes scope, observations and available evidence. It does not certify legal compliance or guarantee no vulnerabilities. A completed checklist or task does not prove compliance by itself.
Does technical analysis replace legal analysis?
No. Legal bases, contracts and regulatory conclusions require appropriate specialist analysis. Organizing controls and evidence supports that work.
How long does an assessment take?
The schedule depends on scope, systems, access and information availability. No single timeline applies to every environment.
How does contracting work?
The team agrees on needs, included assets, authorizations, owners and deliverables. The proposal also defines any contracted follow-up, corrections and retests.