CYC Assess — Technical Design
CYC Assess is a privacy-first, closed-source SaaS platform that delivers automated cloud governance assessments for mid-market and enterprise organisations running workloads on Microsoft Azure.
Platform Architecture
The platform is composed of five components that execute sequentially per assessment job. Data flows strictly left to right. No component reads from a downstream component.
Component Summary
| Component | Responsibility | IP sensitivity |
|---|---|---|
| 1 — Data Collector | Authenticates to client tenant, collects environment data via REST API and Resource Graph queries, writes raw collection JSON to EDS | Low — no proprietary logic |
| 2 — Ephemeral Data Store | Encrypted, job-scoped, TTL-enforced storage. Default 48hr TTL, opt-in 90-day retained tier | Infrastructure |
| 3 — Assessment Engine | Reads collection data, evaluates B1/B2/B3 items, runs AI inference, produces structured findings | High — core IP |
| 4 — Report Generator | Consumes findings, generates charts and scoring, assembles PDF report | High — proprietary templates |
| 5 — Web + Onboarding | Intake questionnaire, OAuth consent flow, payment, status, report delivery | Medium |
Commercial Tiers
| Tier | Description | Components involved |
|---|---|---|
| Tier 1 | Automated self-serve report within 24 hours | All 5 components |
| Tier 2 | Automated report + expert consultation | All 5 + analyst access to retained EDS |
| Tier 3 | Recurring assessments with drift detection | All 5 + drift comparison in Component 3 |
Documentation Status
| Section | Status |
|---|---|
| Cross-Cutting Concerns | ✅ Complete |
| Component 1 — Data Collector | ✅ Complete |
| Component 2 — Ephemeral Data Store | ✅ Complete |
| Component 3 — Assessment Engine | 🔄 In progress |
| Component 4 — Report Generator | ⏳ Pending |
| Component 5 — Web + Onboarding | ⏳ Pending |