IT Directors and Compliance Officers don't have one gap. They have six. Asset management without change management creates blind spots. Change management without a knowledge base creates undocumented risk. Health monitoring without a CSI report creates data with no action. The Governance Engine runs all of it — continuously, automatically, in your environment.
The Governance Engine adds four production modules on top of Asset Monitor. Each one runs on a schedule — no manual triggers, no dashboards to check, no reports to generate by hand. The system monitors, flags, documents, and reports. Your team deals with the exceptions.
The Health Monitor runs every 6 hours via scheduled n8n trigger. It checks MAX(last_run) across all critical workflows. If any sync is overdue, it logs an ALERT status to the compliance dashboard and fires a notification. No manual intervention required. Compliance posture is visible at all times.
The Change Management module enforces ITIL 4 Change Enablement practice at the database layer. Normal changes are blocked until cab_approved = TRUE. Standard changes bypass the CAB. Emergency changes are logged post-implementation with a required retrospective review. Every state transition is timestamped and immutable — producing SOC 2 Type II Change Management evidence as a natural output of normal operations.
The Knowledge Base module uses Mistral for document extraction and Google Gemini for classification. Every document receives a confidence score (0.00 to 1.00). Documents scoring ≥ 0.85 are auto-confirmed as Draft. Documents below 0.85 are queued for human review. No document is published until is_approved = TRUE. The human approval gate is structurally enforced — not a policy. It cannot be bypassed.
Every Monday at 09:00, an n8n scheduled workflow calls the calculate_km_metrics SQL function, computes KPIs across all active modules, sends the raw data to Google Gemini for narrative refinement, and distributes the finished report by email to stakeholders. A permanent Google Doc archive is created for each report. Scores are logged in the itil_service_metrics table for 6-month rolling trend analysis.
Your certification body requires evidence of Change Enablement, Knowledge Management, and Continual Improvement — not as policy documents, but as operational records. The Governance Engine produces that evidence as a natural output of normal operations. Every change record, every knowledge article approval, every weekly CSI report is audit-ready by default.
You have been asked to close six governance gaps with no additional headcount. Manual processes mean none of them get done consistently. The Governance Engine automates the monitoring, logging, and reporting layer — so your team handles exceptions, not the underlying process. Asset visibility, change control, knowledge governance, and health monitoring run in parallel without requiring a dedicated compliance resource.
You have deployed a compliance platform — either through UNUS London's project delivery or your own build. The Governance Engine is the operational wrapper that keeps it running after go-live. It replaces the ad-hoc maintenance retainer with a structured, monitored subscription. Your post-deployment evidence keeps accumulating without anyone having to remember to generate it.
Includes all standards from Asset Monitor, plus the following additional coverage:
Change management records satisfy Annex A requirements for controlled information processing changes. Knowledge base audit logs satisfy Control A.12.4.1. Health monitor outputs provide continuous A.12.4 evidence.
The CAB approval gate, Forward Schedule of Change database view, and post-implementation review requirement enforce the ITIL 4 Change Enablement practice structurally. Change success rate KPIs feed directly into the weekly CSI report.
The KB module enforces the full ITIL 4 Knowledge Management lifecycle: ingestion, classification, human approval, publication, versioning, and archiving. AI classification is grounded in a live service index — hallucination is structurally prevented.
The weekly CSI report satisfies ISO 9001:2015 Clause 10.3 (Continual Improvement) by automating performance measurement and trend analysis. The Knowledge Base satisfies Clause 7.5 (Documented Information) with approval gates and immutable version history.
The immutable change records, CAB approval timestamps, and post-implementation review trail produced by the Change Management module satisfy SOC 2 Type II Change Management control requirements as a natural output of normal operations — not as retrospective documentation.
All tiers include full data sovereignty. Upgrade at any time. Add industry modules at £99/month each: View Industry Add-ons →
The Governance Engine provisions in 10 minutes. Health Monitor runs its first check in 6 hours. Change Management goes live from first record. The Knowledge Base starts classifying on Day 1. Your first CSI report arrives the following Monday at 09:00. No vendor. No lock-in. No manual reports.