← Get Audit Ready • ↑ Documents
<aside>
🗺️
Goal: Document your security boundary and data flow, including what is public vs private.
</aside>
What the auditor wants
- A diagram that clearly identifies boundaries such as:
- Public Internet
- Private network (where sensitive systems and data live)
- A clear view of how data flows through your system.
How to clear this task
<aside>
🔗
Option A: Link a hosted diagram
- If you maintain architecture diagrams in a live tool, click + New Submission.
- Paste the URL into the Link to diagram field.
- Supported tools include Lucidchart, draw.io, and Confluence.
</aside>
<aside>
📎
Option B: Upload a file
- Export your diagram and upload a PDF, image, or Visio file (up to 100 MB) via the submission form.
</aside>
Guidance
- Small teams: keep it high-level. A simple flow like User → Load Balancer → App Server → Database is fine.
- Solo founders: a logical diagram showing front-end to back-end (for example, Vercel functions calling a Supabase DB) is sufficient.