Everscope Trust Center
Verify exactly what Everscope reads, stores and deletes.
No sales call and no vague checklist. This page is generated from the same endpoint manifest and database model used by the running product.
Schema snapshot generated 2026-09-13T20:10:22.338Z. Product behaviour: metadata only, read-only, tenant-scoped.
Microsoft access
Every product API endpoint, method and returned field group.
Authentication uses Microsoft Entra OAuth with PKCE. Endpoint responses are reduced to the metadata listed below before governance rules run.
Power BI REST API
| Method & endpoint | What Microsoft returns | What Everscope stores |
|---|---|---|
GET/groups?$top={top}&$skip={skip} | Workspaces the signed-in identity may access: IDs, names and workspace type. | Workspace ID, name and type in the immutable scan snapshot. |
GET/groups/{workspaceId}/datasets | Semantic-model IDs, names, configured-by identity and refreshability for one workspace. | Semantic-model metadata; never rows or cell values. |
GET/groups/{workspaceId}/reports | Report IDs, names and linked semantic-model IDs for one workspace. | Report metadata and model linkage. |
GET/datasets | Semantic-model metadata from My workspace. | Semantic-model metadata; never rows or cell values. |
GET/reports | Report metadata from My workspace. | Report metadata and model linkage. |
GET/groups/{workspaceId}/datasets/{datasetId}/refreshes?$top={top} | Refresh run IDs, type, status and start/end times for one semantic model. | Operational refresh metadata and failure text supplied by Microsoft. |
GET/datasets/{datasetId}/refreshes?$top={top} | Refresh history for one semantic model in My workspace. | Operational refresh metadata and failure text supplied by Microsoft. |
GET/groups/{workspaceId}/datasets/{datasetId}/refreshSchedule | Enabled state, days, times, time zone and notification option. | Refresh-schedule metadata. |
GET/datasets/{datasetId}/refreshSchedule | Refresh schedule for one semantic model in My workspace. | Refresh-schedule metadata. |
GET/groups/{workspaceId}/users | Workspace role assignments: principal identifiers, names, type and access right. | Ownership and access metadata used for governance; no Microsoft passwords or tenant content. |
GET/admin/activityevents?startDateTime={utcStart}&endDateTime={utcEnd} | Tenant activity metadata for a complete UTC day. | Deterministic usage aggregates and item/workspace references; raw user activity rows are not retained. |
GET/admin/activityevents?continuationToken={continuationToken} | The next page of the same activity-metadata request. | Same reduced usage aggregates as the first page. |
GET/admin/capacities | Capacity IDs, display names, SKU, state and region. | Capacity metadata in the scan snapshot. |
GET/admin/groups?$top=5000 | Tenant workspace inventory for scanner batching. | Workspace IDs, names, type and state. |
POST/admin/workspaces/getInfo?lineage=true&datasourceDetails=true&datasetSchema=true&datasetExpressions=true | A scanner job ID for requested workspaces; the job is limited to metadata, lineage, schema and expressions. | Job status temporarily; the completed metadata response becomes an immutable scan snapshot. |
GET/admin/workspaces/scanStatus/{scanId} | Scanner job status and Microsoft error metadata, if any. | Scan status and a bounded failure message. |
GET/admin/workspaces/scanResult/{scanId} | Workspace, report, semantic-model, table, column, measure, relationship, role, lineage, source and expression metadata. | Metadata snapshot and deterministic findings; never dataset rows or evaluated query results. |
Fabric REST API
| Method & endpoint | What Microsoft returns | What Everscope stores |
|---|---|---|
GET/workspaces/{workspaceId}/items?include=DefaultIdentity | Fabric item IDs, type, name, description, folder, sensitivity label, tags and default identity. | Fabric inventory and governance metadata. |
GET/workspaces/{workspaceId}/items?include=DefaultIdentity&continuationToken={continuationToken} | The next page of Fabric item metadata. | Same Fabric inventory fields as the first page. |
POST/workspaces/{workspaceId}/reports/{reportId}/getDefinition | The public report definition parts used to analyse report structure. | Derived report-object metadata and deterministic findings; definition payloads are not exposed as business data. |
GET/operations/{operationId} | Long-running operation status and bounded error information. | Only processing state and failure evidence needed for the scan. |
GET/operations/{operationId}/result | The completed report-definition response. | Derived report metadata and findings. |
Hard boundary
Data Everscope never fetches.
- Rows, cell values or query-result data from semantic models, warehouses or lakehouses
- Power BI report visuals as rendered images or end-user filter selections
- Microsoft passwords, MFA secrets, private keys or authentication methods
- Files from SharePoint, OneDrive or other Microsoft 365 workloads
- Customer data through XMLA, DAX query execution, SQL, KQL or OneLake file reads
Stored data
The field-level storage schema.
Expand any table to inspect its exact PostgreSQL fields and types. This inventory comes directly from the Drizzle schema compiled with this deployment.
admin_approval_requestsService operation, security and reliability16 fields
iduuidprimary keyaccount_iduuidrequiredpublic_tokentextrequiredstatustextrequiredmicrosoft_reasontextrequiredadministrator_nametextnullableadministrator_emailtextnullablerequested_attimestamp with time zonerequiredemail_sent_attimestamp with time zonenullablereminder_sent_attimestamp with time zonenullableapproved_attimestamp with time zonenullableapproved_tenant_microsoft_idtextnullableautomatic_scan_started_attimestamp with time zonenullableexpires_attimestamp with time zonerequiredcreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredapp_account_tokensIdentity, organisation scope, Microsoft connection and access control7 fields
iduuidprimary keyaccount_iduuidrequiredpurposetextrequiredtoken_hashtextrequiredexpires_attimestamp with time zonerequiredused_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredapp_accountsIdentity, organisation scope, Microsoft connection and access control35 fields
iduuidprimary keytenant_iduuidnullableemailtextrequiredpassword_hashtextrequireddisplay_nametextnullableorganisation_nametextnullableselected_plantextrequiredbilling_cycletextrequiredstatustextrequiredbilling_statustextrequiredstripe_customer_idtextnullablestripe_subscription_idtextnullableproject_scan_creditsintegerrequiredtrial_ends_attimestamp with time zonenullabletrial_started_attimestamp with time zonenullableearly_access_eligible_untiltimestamp with time zonenullableearly_access_discount_percentintegerrequiredlifetime_discount_locked_attimestamp with time zonenullablevat_idtextnullablepurchase_order_numbertextnullablecurrent_period_ends_attimestamp with time zonenullablebilling_updated_attimestamp with time zonenullablebilling_event_created_attimestamp with time zonenullableemail_verified_attimestamp with time zonenullablesession_versionintegerrequiredmarketing_consentbooleanrequiredmarketing_consent_attimestamp with time zonenullablemarketing_consent_sourcetextnullableterms_accepted_attimestamp with time zonenullableterms_versiontextnullablebusiness_customer_confirmed_attimestamp with time zonenullableconnected_connection_iduuidnullablelast_signed_in_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredasset_governanceGovernance workflow, decision history and audit evidence16 fields
iduuidprimary keytenant_iduuidrequiredasset_typegovernance_asset_typerequiredasset_pbi_idtextrequiredasset_nametextnullablebusiness_ownertextnullabletechnical_ownertextnullabledata_stewardtextnullabledomaintextnullablecriticalityasset_criticalityrequiredclassificationtextnullablesupport_grouptextnullablesla_hoursintegernullablecertifiedbooleanrequiredcreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredasset_usageService operation, security and reliability10 fields
iduuidprimary keyscan_iduuidrequiredworkspace_pbi_idtextnullabledataset_pbi_idtextnullablereport_pbi_idtextnullableactivity_countintegerrequiredview_countintegerrequiredunique_usersintegerrequiredlast_activity_attimestamp with time zonenullablewindow_daysintegerrequiredaudit_logsGovernance workflow, decision history and audit evidence8 fields
iduuidprimary keytenant_iduuidrequiredconnection_iduuidnullableactiontextrequiredtarget_typetextnullabletarget_idtextnullablemetadatajsonbnullablecreated_attimestamp with time zonerequiredbi_policiesService operation, security and reliability18 fields
iduuidprimary keytenant_iduuidrequiredcodetextrequirednametextrequireddescriptiontextnullablecategorytextrequiredrequirementtextrequiredevaluationpolicy_evaluationrequiredrule_idtextnullableasset_scopesjsonbrequiredseverityfinding_severityrequiredownertextnullabledomaintextnullablereview_cadence_daysintegerrequiredenabledbooleanrequiredcreated_by_connection_iduuidnullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredconnectionsIdentity, organisation scope, Microsoft connection and access control12 fields
iduuidprimary keytenant_iduuidrequiredms_user_idtextrequiredhome_account_idtextrequiredemailtextnullabledisplay_nametextnullableencrypted_token_cachetextrequiredaccess_modetextrequiredgranted_scopesjsonbrequiredconsented_attimestamp with time zonerequiredcreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequireddata_deletion_receiptsPrivacy-preserving proof that a deletion completed on time11 fields
iduuidprimary keyrequest_idtextrequiredaccount_hashtextrequiredemail_hashtextrequiredtenant_hashtextnullablestatustextrequiredrequested_attimestamp with time zonerequiredcompleted_attimestamp with time zonenullableconfirmation_sent_attimestamp with time zonenullableprovider_message_idtextnullablecreated_attimestamp with time zonerequireddataset_refreshesService operation, security and reliability12 fields
iduuidprimary keyscan_iduuidrequireddataset_iduuidnullabledataset_pbi_idtextrequiredrefresh_idtextnullablerefresh_typetextnullablestatustextnullablestart_timetimestamp with time zonenullableend_timetimestamp with time zonenullableduration_msintegernullableerrortextnullableschedulejsonbnullabledatasetsImmutable metadata scan, inventory and deterministic rule evidence7 fields
iduuidprimary keyscan_iduuidrequiredworkspace_iduuidnullablepbi_idtextrequirednametextnullableconfigured_bytextnullableis_refreshablebooleannullabledpa_agreementsCustomer-requested delivery, sharing or signed document evidence17 fields
iduuidprimary keydocument_idtextrequiredaccount_iduuidrequiredversiontextrequiredcustomer_legal_nametextrequiredcustomer_registration_numbertextnullablecustomer_addresstextrequiredsigner_nametextrequiredsigner_titletextrequiredsigner_emailtextrequiredterms_sha256textrequiredpdf_bytesbytearequiredpdf_sha256textrequiredsigned_attimestamp with time zonerequiredemailed_attimestamp with time zonenullableprovider_message_idtextnullablecreated_attimestamp with time zonerequiredevidence_dossiersCustomer-requested delivery, sharing or signed document evidence23 fields
iduuidprimary keydocument_idtextrequiredinput_hashtextrequiredstatustextrequiredsource_typetextrequiredtenant_iduuidnullablerequested_by_connection_iduuidnullablesource_scan_iduuidnullablepublic_file_scan_iduuidnullablerecipient_emailtextnullablesnapshot_jsonjsonbrequiredprogress_percentintegerrequiredprogress_messagetextrequiredpdf_bytesbyteanullablexlsx_bytesbyteanullablepdf_sha256textnullablexlsx_sha256textnullablefailure_messagetextnullablecreated_attimestamp with time zonerequiredstarted_attimestamp with time zonenullablecompleted_attimestamp with time zonenullableemailed_attimestamp with time zonenullableexpires_attimestamp with time zonenullablefabric_itemsImmutable metadata scan, inventory and deterministic rule evidence14 fields
iduuidprimary keyscan_iduuidrequiredworkspace_iduuidnullableitem_idtextrequireditem_typetextrequirednametextnullabledescriptiontextnullablefolder_idtextnullablesensitivity_label_idtextnullableowner_principal_idtextnullableowner_principal_nametextnullableowner_principal_typetextnullabletagsjsonbnullablecreated_attimestamp with time zonerequiredfinding_workflowsGovernance workflow, decision history and audit evidence13 fields
iduuidprimary keytenant_iduuidrequiredfingerprinttextrequiredstatusfinding_workflow_statusrequiredpriorityworkflow_priorityrequiredownertextnullabledecisiontextnullabledue_datetimestamp with time zonenullableticket_urltextnullablevalidatortextnullablenotetextnullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredfindingsImmutable metadata scan, inventory and deterministic rule evidence24 fields
iduuidprimary keyscan_iduuidrequiredrule_idtextrequiredrule_versiontextrequiredrule_bundle_versiontextrequiredrule_severitytextrequiredcategorytextrequiredseverityfinding_severityrequiredconfidencefinding_confidencerequiredrequirementtextrequiredtarget_typetextrequiredtarget_idtextrequiredtarget_nametextrequiredfingerprinttextnullableworkspace_iduuidnullabledataset_iduuidnullablereport_iduuidnullabletitletextrequiredmessagetextrequiredrecommendationtextrequiredevidencejsonbrequiredaffected_objectsjsonbrequiredscan_timestamptimestamp with time zonerequiredcreated_attimestamp with time zonerequiredfree_project_scan_findingsImmutable metadata scan, inventory and deterministic rule evidence20 fields
iduuidprimary keyscan_iduuidrequiredrule_codetextrequiredrule_versiontextrequiredrule_bundle_versiontextrequiredcategorytextrequiredseveritytextrequiredobject_typetextrequiredtable_nametextnullableobject_nametextrequiredusage_statustextrequiredconfidencetextrequiredtitletextrequiredexplanationtextrequiredrecommendationtextrequiredreferences_jsonjsonbrequiredreport_names_jsonjsonbrequiredaffected_objects_jsonjsonbrequiredevidence_jsonjsonbrequiredscanned_attimestamp with time zonerequiredfree_project_scan_reportsImmutable metadata scan, inventory and deterministic rule evidence7 fields
iduuidprimary keyscan_iduuidrequiredreport_nametextrequiredpage_countintegerrequiredvisual_countintegerrequiredparsing_statustextrequiredwarning_countintegerrequiredfree_project_scan_uploadsImmutable metadata scan, inventory and deterministic rule evidence4 fields
scan_iduuidprimary keyzip_bytesbytearequiredbyte_lengthintegerrequiredcreated_attimestamp with time zonerequiredfree_project_scansImmutable metadata scan, inventory and deterministic rule evidence20 fields
iduuidprimary keyaccount_iduuidrequiredstatustextrequiredoriginal_file_nametextrequiredproject_nametextnullablemodel_nametextnullablereport_countintegerrequiredaccess_typetextrequiredcredit_refunded_attimestamp with time zonenullablestarted_attimestamp with time zonenullablecompleted_attimestamp with time zonenullablefailed_attimestamp with time zonenullablefailure_codetextnullablefailure_messagetextnullablecreated_attimestamp with time zonerequiredraw_file_deleted_attimestamp with time zonenullablesummary_jsonjsonbnullableparser_versiontextrequiredscanner_versiontextrequiredrule_bundle_versiontextrequiredgovernance_api_keysGovernance workflow, decision history and audit evidence11 fields
iduuidprimary keytenant_iduuidrequiredcreated_by_connection_iduuidnullablenametextrequiredkey_prefixtextrequiredkey_hashtextrequiredscopesjsonbrequiredexpires_attimestamp with time zonenullablelast_used_attimestamp with time zonenullablerevoked_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredgovernance_attestationsGovernance workflow, decision history and audit evidence18 fields
iduuidprimary keytenant_iduuidrequiredasset_typegovernance_asset_scoperequiredasset_pbi_idtextrequiredasset_nametextnullabledomaintextnullableattestation_typetextrequiredassigneetextrequiredstatusattestation_statusrequireddue_attimestamp with time zonerequiredstatementtextrequiredevidencejsonbnullableresponse_notetextnullablerequested_by_connection_iduuidnullableresponded_by_connection_iduuidnullableresponded_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredgovernance_exceptionsGovernance workflow, decision history and audit evidence18 fields
iduuidprimary keytenant_iduuidrequiredpolicy_iduuidnullableasset_typegovernance_asset_scoperequiredasset_pbi_idtextrequiredasset_nametextnullabledomaintextnullablereasontextrequiredcompensating_controltextrequiredownertextrequiredstatusexception_statusrequiredexpires_attimestamp with time zonerequiredrequested_by_connection_iduuidnullableapproved_by_connection_iduuidnullabledecision_notetextnullabledecided_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredgovernance_notificationsGovernance workflow, decision history and audit evidence10 fields
iduuidprimary keytenant_iduuidrequiredconnection_iduuidnullabletypetextrequiredseveritytextrequiredtitletextrequiredmessagetextrequiredtarget_urltextnullableread_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredgovernance_scan_schedulesImmutable metadata scan, inventory and deterministic rule evidence17 fields
iduuidprimary keytenant_iduuidrequiredconnection_iduuidrequirednametextrequiredscan_modetextrequiredcadenceschedule_cadencerequiredweekdayintegernullablemonth_dayintegernullablehour_utcintegerrequiredenabledbooleanrequirednext_run_attimestamp with time zonerequiredlast_run_attimestamp with time zonenullablelast_statustextnullablenotify_onjsonbrequirednotification_recipientsjsonbrequiredcreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredhealth_checkService operation, security and reliability3 fields
idserialprimary keynotetextnullablechecked_attimestamp with time zonerequiredkpi_report_linksGovernance workflow, decision history and audit evidence6 fields
iduuidprimary keytenant_iduuidrequiredkpi_iduuidrequiredreport_pbi_idtextrequiredreport_nametextnullablecreated_attimestamp with time zonerequiredkpi_versionsGovernance workflow, decision history and audit evidence8 fields
iduuidprimary keytenant_iduuidrequiredkpi_iduuidrequiredversionintegerrequiredsnapshotjsonbrequiredchanged_by_connection_iduuidnullablechange_notetextnullablecreated_attimestamp with time zonerequiredkpisGovernance workflow, decision history and audit evidence32 fields
iduuidprimary keytenant_iduuidrequiredparent_iduuidnullablecreated_by_connection_iduuidnullablenode_typekpi_node_typerequiredstatuskpi_statusrequiredsort_orderintegerrequiredcodetextnullablenametextrequireddescriptiontextnullablebusiness_definitiontextnullablecalculationtextnullableunittextnullabledirectionkpi_directionrequiredtarget_valuetextnullablewarning_thresholdtextnullablecritical_thresholdtextnullablecadencetextnullablebusiness_ownertextnullabletechnical_ownertextnullabledata_stewardtextnullabledomaintextnullablecriticalityasset_criticalityrequiredclassificationtextnullabledataset_pbi_idtextnullabledataset_nametextnullablemeasure_nametextnullablemeasure_tabletextnullableapproved_bytextnullableapproved_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredlaunch_settingsService operation, security and reliability25 fields
iduuidprimary keytenant_iduuidrequiredlegal_nametextnullableprivacy_emailtextnullablesupport_emailtextnullableincident_ownertextnullablestatus_page_urltextnullablecustom_domaintextnullablelegal_approvedbooleanrequireddpa_approvedbooleanrequiredbackups_enabledbooleanrequiredrestore_tested_attimestamp with time zonenullablesecurity_review_attimestamp with time zonenullableaccessibility_review_attimestamp with time zonenullablepublisher_verifiedbooleanrequiredadmin_consent_tested_attimestamp with time zonenullablestaging_verified_attimestamp with time zonenullablerollback_tested_attimestamp with time zonenullablepilot_customertextnullablepilot_accepted_attimestamp with time zonenullablego_live_decisiontextrequiredgo_live_notetextnullableupdated_by_connection_iduuidnullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredlineage_hopsService operation, security and reliability10 fields
iduuidprimary keytenant_iduuidrequireddataset_pbi_idtextrequiredtable_nametextrequiredupstream_labeltextrequirednotetextnullablesource_fingerprinttextnullabledeclared_bytextnullabledeclared_attimestamp with time zonerequiredconfirmed_attimestamp with time zonenullablemodel_objectsImmutable metadata scan, inventory and deterministic rule evidence14 fields
iduuidprimary keyscan_iduuidrequireddataset_iduuidnullableexternal_idtextnullableobject_typemodel_object_typerequiredtable_nametextnullablenametextrequiredparent_object_iduuidnullableexpressiontextnullabledescriptiontextnullablestatetextnullableis_hiddenbooleannullabledata_typetextnullablemetadatajsonbnullablenotification_deliveriesCustomer-requested delivery, sharing or signed document evidence12 fields
iduuidprimary keytenant_iduuidrequiredpreference_iduuidrequiredkindtextrequiredevent_keytextrequiredstatustextrequiredtarget_urltextnullableprovider_message_idtextnullablefailure_messagetextnullablesent_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequirednotification_preferencesCustomer-requested delivery, sharing or signed document evidence12 fields
iduuidprimary keytenant_iduuidrequiredaccount_iduuidnullableemailtextrequireddisplay_nametextnullableweekly_digestbooleanrequiredexception_remindersbooleanrequiredexternal_sharing_alertsbooleanrequiredcritical_finding_alertsbooleanrequiredscan_failure_alertsbooleanrequiredcreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredobject_referencesImmutable metadata scan, inventory and deterministic rule evidence7 fields
iduuidprimary keyscan_iduuidrequiredsource_object_iduuidnullabletarget_object_iduuidnullabletarget_nametextnullablekindtextrequiredconfidencefinding_confidencerequiredoperational_alertsService operation, security and reliability14 fields
iduuidprimary keytenant_iduuidrequiredfingerprinttextrequiredtypetextrequiredseveritytextrequiredsourcetextrequiredtitletextrequiredmessagetextrequiredmetadatajsonbnullableoccurrence_countintegerrequiredstatustextrequiredfirst_seen_attimestamp with time zonerequiredlast_seen_attimestamp with time zonerequiredresolved_attimestamp with time zonenullablepilot_feedbackService operation, security and reliability11 fields
iduuidprimary keytenant_iduuidrequiredconnection_iduuidnullablecategorytextrequiredratingintegernullabletitletextrequiredmessagetextrequiredstatustextrequiredresolutiontextnullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredpolicy_assessmentsGovernance workflow, decision history and audit evidence14 fields
iduuidprimary keytenant_iduuidrequiredpolicy_iduuidrequiredasset_typegovernance_asset_scoperequiredasset_pbi_idtextrequiredasset_nametextnullabledomaintextnullablestatusassessment_statusrequiredevidencejsonbnullablenotetextnullableassessed_by_connection_iduuidnullableassessed_attimestamp with time zonenullablenext_review_attimestamp with time zonenullableupdated_attimestamp with time zonerequiredproduct_eventsService operation, security and reliability9 fields
iduuidprimary keyvisitor_idtextrequiredaccount_iduuidnullabletenant_iduuidnullablescan_iduuidnullablesubject_idtextnullableevent_nametextrequiredmetadatajsonbnullablecreated_attimestamp with time zonerequiredproject_scan_credit_purchasesImmutable metadata scan, inventory and deterministic rule evidence8 fields
iduuidprimary keyaccount_iduuidrequiredstripe_checkout_session_idtextrequiredcreditsintegerrequiredamount_totalintegernullablecurrencytextnullablefulfilled_attimestamp with time zonerequiredcreated_attimestamp with time zonerequiredpublic_file_scan_invitationsImmutable metadata scan, inventory and deterministic rule evidence9 fields
iduuidprimary keypublic_file_scan_iduuidrequiredinvited_by_account_iduuidrequiredrecipient_emailtextrequiredexpires_attimestamp with time zonerequiredrevoked_attimestamp with time zonenullablelast_viewed_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredpublic_file_scansImmutable metadata scan, inventory and deterministic rule evidence26 fields
iduuidprimary keyaccount_iduuidnullabletoken_hashtextrequiredstatustextrequiredoriginal_file_nametextrequiredinput_formattextrequiredbyte_lengthintegerrequiredtemp_directorytextnullableprogress_objecttextnullableprogress_countintegerrequiredprogress_totalintegerrequiredsummary_jsonjsonbnullableinventory_jsonjsonbrequiredreports_jsonjsonbrequiredfindings_jsonjsonbrequiredwarnings_jsonjsonbrequiredrule_bundle_versiontextrequiredscanner_versiontextrequiredfailure_codetextnullablefailure_messagetextnullableretention_emailtextnullablecreated_attimestamp with time zonerequiredstarted_attimestamp with time zonenullablecompleted_attimestamp with time zonenullableraw_file_deleted_attimestamp with time zonenullableexpires_attimestamp with time zonerequiredrate_limit_bucketsService operation, security and reliability4 fields
keytextprimary keycountintegerrequiredreset_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredreportsImmutable metadata scan, inventory and deterministic rule evidence6 fields
iduuidprimary keyscan_iduuidrequiredworkspace_iduuidnullablepbi_idtextrequirednametextnullabledataset_pbi_idtextnullablescan_access_grantsImmutable metadata scan, inventory and deterministic rule evidence8 fields
iduuidprimary keyscan_iduuidrequiredworkspace_pbi_idtextrequiredprincipal_idtextrequiredprincipal_nametextnullableprincipal_typetextnullableaccess_righttextnullableaccess_scopetextrequiredscan_capacitiesImmutable metadata scan, inventory and deterministic rule evidence7 fields
iduuidprimary keyscan_iduuidrequiredpbi_idtextrequireddisplay_nametextnullableskutextnullablestatetextnullableregiontextnullablescan_changesImmutable metadata scan, inventory and deterministic rule evidence20 fields
iduuidprimary keytenant_iduuidrequiredscan_iduuidrequiredprevious_scan_iduuidnullablechange_typetextrequiredseveritytextrequiredobject_keytextrequiredobject_typetextrequiredobject_idtextrequiredobject_nametextrequiredworkspace_idtextnullableworkspace_nametextnullableownertextnullableapprovedbooleanrequiredapprovaljsonbnullableold_valuejsonbnullablenew_valuejsonbnullableimpact_chainsjsonbrequiredoccurred_attimestamp with time zonerequiredcreated_attimestamp with time zonerequiredscan_state_deltasImmutable metadata scan, inventory and deterministic rule evidence9 fields
iduuidprimary keytenant_iduuidrequiredscan_iduuidrequiredprevious_scan_iduuidnullableis_checkpointbooleanrequiredobject_countintegerrequiredstate_hashtextrequiredpayloadjsonbrequiredcreated_attimestamp with time zonerequiredscansImmutable metadata scan, inventory and deterministic rule evidence10 fields
iduuidprimary keytenant_iduuidrequiredconnection_iduuidnullabletiertierrequiredstatusscan_statusrequiredstarted_attimestamp with time zonerequiredfinished_attimestamp with time zonenullablesummaryjsonbnullableerrortextnullablerule_bundle_versiontextrequiredself_service_quotesSelf-service billing, entitlement and payment-provider reconciliation13 fields
iduuidprimary keyaccount_iduuidrequiredquote_numbertextrequireditem_pointsintegerrequiredmonthly_amount_centsintegerrequiredannual_amount_centsintegerrequiredcurrencytextrequiredvalid_untiltimestamp with time zonerequiredstatustextrequiredvat_idtextnullablepurchase_order_numbertextnullableordered_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredservice_incidentsService operation, security and reliability10 fields
iduuidprimary keytenant_iduuidrequiredtitletextrequiredmessagetextrequiredseveritytextrequiredstatustextrequiredcreated_by_connection_iduuidnullablestarted_attimestamp with time zonerequiredresolved_attimestamp with time zonenullableupdated_attimestamp with time zonerequiredshared_linksCustomer-requested delivery, sharing or signed document evidence14 fields
iduuidprimary keytenant_iduuidrequiredtoken_hashtextrequiredresource_typetextrequiredresource_idtextrequiredsnapshot_jsonjsonbrequiredsourcetextrequiredrecipient_emailtextnullablecreated_by_connection_iduuidnullableexpires_attimestamp with time zonerequiredrevoked_attimestamp with time zonenullablelast_viewed_attimestamp with time zonenullableview_countintegerrequiredcreated_attimestamp with time zonerequiredstripe_webhook_eventsSelf-service billing, entitlement and payment-provider reconciliation8 fields
event_idtextprimary keyevent_typetextrequiredstripe_created_attimestamp with time zonerequiredattemptsintegerrequiredprocessed_attimestamp with time zonenullablelast_errortextnullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredtenant_membershipsIdentity, organisation scope, Microsoft connection and access control12 fields
iduuidprimary keytenant_iduuidrequiredconnection_iduuidnullableinvited_emailtextnullabledisplay_nametextnullableroletenant_rolerequiredstatusmembership_statusrequireddomaintextnullableinvited_by_connection_iduuidnullableinvited_attimestamp with time zonerequiredactivated_attimestamp with time zonenullableupdated_attimestamp with time zonerequiredtenant_subscriptionsSelf-service billing, entitlement and payment-provider reconciliation15 fields
iduuidprimary keytenant_iduuidrequiredplantextrequiredstatustextrequiredtrial_ends_attimestamp with time zonenullablebilling_cycletextrequireditem_point_limitintegerrequiredmember_limitintegerrequiredmonthly_scan_limitintegerrequiredprovidertextnullableprovider_customer_idtextnullableprovider_subscription_idtextnullablecurrent_period_ends_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredtenantsIdentity, organisation scope, Microsoft connection and access control4 fields
iduuidprimary keyms_tenant_idtextrequireddisplay_nametextnullablecreated_attimestamp with time zonerequiredwork_itemsService operation, security and reliability20 fields
iduuidprimary keytenant_iduuidrequiredcreated_by_connection_iduuidnullableassignee_membership_iduuidnullablesource_typework_item_source_typerequiredsource_idtextrequiredsource_labeltextrequiredsource_urltextrequireddomaintextnullabletitletextrequireddescriptiontextnullablebusiness_outcometextnullablesuccess_measuretextnullablestatuswork_item_statusrequiredpriorityworkflow_priorityrequireddue_datetimestamp with time zonenullablesort_orderintegerrequiredcompleted_attimestamp with time zonenullablecreated_attimestamp with time zonerequiredupdated_attimestamp with time zonerequiredworker_heartbeatsService operation, security and reliability3 fields
nametextprimary keylast_seen_attimestamp with time zonerequiredmetadatajsonbnullableworkspacesImmutable metadata scan, inventory and deterministic rule evidence5 fields
iduuidprimary keyscan_iduuidrequiredpbi_idtextrequirednametextnullabletypetextnullableRetention
Deletion is defined per data type.
| Data category | Retention | Deletion mechanism |
|---|---|---|
| Raw anonymous file-scan upload | Processing only | Deleted from the temporary directory in a guaranteed cleanup path; interrupted jobs are purged after the processing timeout plus five minutes. |
| Anonymous file-scan result | 7 days | Automatically deleted when the unguessable result URL expires. |
| Account project-scan upload | Processing only; stale maximum 24 hours | Deleted after processing and by the daily stale-upload cleanup. |
| Account project-scan result | 90 days by current production setting | Daily retention job; account deletion removes it immediately. |
| Completed Microsoft tenant scans and findings | 730 days | Daily retention job; organisation/account deletion removes the tenant data immediately when no authorised members remain. |
| Failed Microsoft tenant scans | 90 days by current production setting | Daily retention job. |
| Shared finding and evidence links | 30 days unless revoked sooner | Expiry is enforced on every read; tenant deletion removes the record. |
| Anonymous evidence dossier | Until its 7-day source scan expires | Cascades with the anonymous scan. |
| Account, governance, audit and billing records | For the active account | Machine-readable export is available first; confirmed account deletion removes customer records and Microsoft tokens immediately, subject only to payment-provider legal retention outside Everscope. |
| Deletion receipt | 730 days | Contains request/completion timestamps and one-way hashes only; no name, email address, tenant metadata or token. |
Subprocessors & regions
Who processes which category, and where.
| Provider | Country / region | Function and data |
|---|---|---|
| Fly.io, Inc. | United States; workload region Netherlands | Runs the web application and background worker in Amsterdam (ams). Encrypted application traffic and operational metadata. |
| Supabase, Inc. | United States; configured database region European Economic Area | Managed PostgreSQL database and backups. Accounts, Microsoft metadata, governance records and encrypted Microsoft token cache. |
| Microsoft | Customer Microsoft tenant region | Microsoft Entra identity and the Power BI and Fabric metadata APIs. Microsoft identity, OAuth token material and metadata returned by the documented endpoints. |
| Stripe Payments Europe, Limited | Ireland; global support subprocessors | Self-service checkout, subscriptions, invoices and tax calculation. Billing contact, address, tax ID, payment status and payment method metadata. |
| Plus Five Five, Inc. (Resend) | United States | Transactional email delivery. Recipient email, display name, message content and requested report/DPA attachments. |
Current assurance position
No certification claim before the audit is complete.
Everscope is not currently SOC 2 or ISO 27001 certified. The roadmap target is a documented independent controls-readiness assessment in Q2 2027, followed by an ISO 27001 certification decision in Q4 2027; these are planning targets, not current certifications.