Skip to main content
Regulaxy
Prove

The system owner signs off, in writing.

"I spoke to him and he said it was fine" is not an approval. It is a memory.

The artifact

An approval record with a timestamp

The problem

The audit asks who approved it.

The answer exists. It is in a mail thread belonging to somebody who no longer works here, and it cannot be produced. Until then nobody knew it would be needed.

How it works
  1. 01

    The request

    The owner gets a calendar invite, not an email. The request is an action with two possible answers rather than a paragraph they can skip.

  2. 02

    The answer

    Accept, decline or propose another time — all of them come back as an ordinary calendar response, from the client they already use.

  3. 03

    The record

    The response is written against the event: who, when, and what they said. It cannot be quietly edited afterwards.

  4. 04

    Memory

    Whoever was involved in a system's event is remembered for next time, so nobody has to rediscover who owns a system every quarter.

Figure — the approval chain as it is recorded
What it connects to

The approval needs no new tool at the owner's end.

  • Exchange and Outlook
  • Active Directory
  • The audit log
What it produces

A row in the audit trail

Who approved, when, for which event, and what has changed since. It is the row §98 asks for, and it survives the event being deleted.

Show us your worst window.

Bring the one that keeps slipping. Thirty minutes, your estate, no slides.