Guardia AI — Admin Dashboard

💰 Revenue

Monthly Recurring Revenue

—

Annual Run Rate

—

Paying Customers

—

Avg Revenue Per User

—

per paying customer / mo

📈 Growth (last 30 days)

New Signups

—

New MRR Added

—

Churned

—

Total Scans This Month

—

across all active tenants

📊 Free Trial Funnel

Trial Sign-ups

—

total since launch

Active Trials

—

Converted to Paid

—

Conversion Rate

—

Avg Days to Convert

—

trial start → upgrade

Converted MRR

—

MRR from trial → paid

👥 All Tenants

Customer List

Email	Plan	Status	Scans / mo	Quota	Activated	Actions

📊 Breakdown

Plan Distribution

Signups — Last 90 Days

Revenue by Plan

Scan Usage by Plan this month

⚠️ At-Risk Tenants

No scans since activation (7+ days active, 0 scans)

🎁 Feature Access & Promotions

Grant or restrict Professional & Enterprise features to individual tenants or API keys — independently of their billing plan. You can also run time-limited global launch promotions.

🔓 Per-Tenant Feature Unlock

Tenant ID or gai-xxx API Key

Duration (leave blank = permanent)

Professional Features (not included in Free / Starter)

🔐 Customer-Managed Keys (CMK) ⏱ Continuous Governance (Bi-weekly — Professional) 🔄 Scan Compare & Diff 🔗 Multi-Subscription (up to 15) 📋 All 7 Regulatory Frameworks (Starter+) 🔌 REST API Access Not on Free / Starter

Enterprise Features (not included in Pro or below)

⚡ Continuous Governance (Daily — Enterprise) 📦 IaC Export (Bicep / ARM / TF) ♾️ Unlimited Scans 🔗 Unlimited Subscriptions 🤖 AI-Enriched Narratives 📂 365-Day Report History 🚨 Drift Alerts & Notifications 📋 Executive Scorecard + Roadmap + Auditor Package Enterprise only

📧 CCM Email Notification Override

Force-enable or force-disable a tenant's automated CCM emails, overriding their own portal self-service preference. Uses the Tenant ID / API Key entered above. Set back to "Tenant's Choice" to remove the override.

Scan Complete

Drift Alert

Compliance Failure

Framework Updated

🎁 Launch Promotions

Global promos:

📧 Email Template Tester

Send a live test email for any platform template. Uses real SendGrid — goes to the specified address.

Template

Send To

Tenant ID (optional — uses dummy data if blank)

⏱ Extend Individual Tenant Trial

Tenant ID

Extra Days

Extra Scans

Rotate or expire a key by tenant ID

⚙️ Platform Settings

Governance Scan Execution Mode

Controls how governance scans handle tenants with multiple Azure subscriptions. Serial runs one subscription at a time (safer, less Azure API pressure). Parallel runs up to the limit concurrently (faster for large tenants).

🌐 Platform-level setting — applies to all tenants globally, not per-tenant

Scan Mode

Max Parallel Subscriptions

🔒 Platform-Managed Key (PMK) — Zero-Trust Encryption

All tenant scan reports are AES-256-GCM encrypted at rest using the PMK stored in guardia-ai-saas-kv (secret: guardia-report-encr-creds). This applies to every plan including Free Trial. Professional & Enterprise tenants may additionally configure their own CMK.

🌐 Platform-level — applies to all tenants globally

Key Vault URL

Secret Name

✏️ Fields are editable — enter alternative values and click Test to validate before updating your Container App env vars.

⚠️ Key Rotation: To rotate the PMK, generate a new secret version in Azure Key Vault under guardia-ai-saas-kv → Secrets → guardia-report-encr-creds, then update the GUARDIA_VAULT_URL environment variable on the Container App and redeploy. Existing encrypted reports will remain decryptable as long as the old secret version is not disabled in Key Vault.

🔗 Open Azure Key Vault

🗄️ Archive & Audit Log

Report Archive — Azure Blob Storage

Every scan report is archived to Azure Blob Storage at write time per internal retention policy, independent of the customer-facing Cosmos DB TTL. Audit events (manual deletions, governance history clears, tenant purges) are appended to the audit-log container.

🔒 Internal only — not visible to tenants

—

Archived Reports

—

Audit Log Files

—

Last Archived

Filter by Tenant ID (leave blank for platform totals)

🌐 Regulatory Watch — Controls Registry

Last Pushed

—

Frameworks

Needs Update

—

Never Reviewed

—

📡 Live Feed — This Week's Updates

Loading regulatory feed…

📋 Frameworks Review Status Mark each framework reviewed after checking the feed above. Flag it if a control needs code changes.

Loading registry…

🚀 Push to Staging

Commits the current Cosmos-backed controls_registry.json to the develop branch and triggers a staging deploy via GitHub Actions. Takes ~3–5 min to go live.

View Actions ↗

ℹ️ Staging-only feature. This action requires a GitHub PAT that is intentionally not wired into production (security posture). To update staging with new registry changes, use the normal CI/CD pipeline: commit to develop → staging deploys automatically, then run Merge Registry on staging admin panel.

📣 Notify Tenants — Framework Updated

Sends a customer-facing email to every tenant entitled to the selected framework, letting them know its controls changed. Only use this after a real scanner code change has already shipped to production — never for raw RSS auto-flags, which are often false positives. Always preview first.

Admin Access

📧 Email Template Tester