# usamasalman/grc-saas-platform- architecture

> Architecture diagram of the GitHub repository usamasalman/grc-saas-platform-, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-27). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/usamasalman/grc-saas-platform-
- Repository: https://github.com/usamasalman/grc-saas-platform-

## Overview

GRC Wisdom is a multi-tenant governance, risk, and compliance product with a React workspace and an Express API. Users enter a tenant workspace to manage standards and controls, assess risks and assets, plan and execute audits, and deliver compliance projects; documents, reports, and dashboards support that work. The graph includes the sampled document, workflow, and delivery-report internals. The README is empty, and most feature wiring was not sampled, so uncertain links are omitted rather than inferred.

Main entry points: [`grc_wisdom_api/src/app.ts`](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/app.ts) (Express API), [`grc_wisdom_api/src/db.ts`](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/db.ts) (Prisma database), [`grc_wisdom_api/src/services/workflowEngine.ts`](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/services/workflowEngine.ts) (Workflow engine), [`grc_wisdom_api/src/controllers/deliveryReportController.ts`](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/deliveryReportController.ts) (Delivery reports)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_experience["Workspace experience"]
  node_web["React workspace<br/>[App.tsx]"]
  node_tenant_admin["Tenant management<br/>[TenantManager.tsx]"]
  node_grc_ui["GRC workspace"]
  node_audit_ui["Audit workspace"]
  node_project_ui["Project delivery"]
  node_document_ui["Document workspace"]
end

subgraph group_governance["Governance and risk"]
  node_standards["Standards and controls"]
  node_assets["Asset register<br/>[assetController.ts]"]
  node_risk["Risk management<br/>[riskController.ts]"]
end

subgraph group_assurance["Audit and delivery"]
  node_audit["Audit planning"]
  node_fieldwork["Audit fieldwork"]
  node_projects["Project management"]
  node_delivery_report["Delivery reports"]
end

subgraph group_documents["Documents and reporting"]
  node_documents["Document lifecycle"]
  node_workflow["Workflow engine<br/>[workflowEngine.ts]"]
end

subgraph group_platform["API and platform"]
  node_capabilities["Capability checks"]
  node_sod["Duties enforcement<br/>[sodEngine.ts]"]
  node_api["Express API<br/>[app.ts]"]
  node_grc_routes["GRC routes<br/>[grcRoutes.ts]"]
  node_project_routes["Project routes<br/>[projectRoutes.ts]"]
  node_db[("Prisma database<br/>[db.ts]")]
end

node_member(("Tenant user"))

node_member -->|"uses"| node_web
node_web -->|"HTTP requests"| node_api
node_tenant_admin -->|"loads and provisions"| node_api
node_grc_ui -->|"GRC requests"| node_api
node_audit_ui -->|"audit requests"| node_api
node_project_ui -->|"project requests"| node_api
node_document_ui -->|"document requests"| node_api
node_api -->|"dispatches"| node_grc_routes
node_grc_routes -->|"dispatches"| node_standards
node_api -->|"queries"| node_db
node_project_routes -->|"dispatches"| node_projects
node_project_routes -->|"checks access"| node_capabilities
node_workflow -->|"checks grants"| node_capabilities
node_workflow -->|"checks duties"| node_sod
node_workflow -->|"reads and writes"| node_db
node_documents -->|"reads and writes"| node_db
node_documents --> node_sod
node_delivery_report -->|"guards project"| node_projects
node_delivery_report -->|"loads report data"| node_db

click node_web "https://github.com/usamasalman/grc-saas-platform-/blob/main/src/App.tsx"
click node_tenant_admin "https://github.com/usamasalman/grc-saas-platform-/blob/main/src/pages/tenants/TenantManager.tsx"
click node_grc_ui "https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/grc"
click node_audit_ui "https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/grc/audit"
click node_project_ui "https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/grc/project"
click node_document_ui "https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/documents"
click node_standards "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/standardsAuthoringController.ts"
click node_assets "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/assetController.ts"
click node_risk "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/riskController.ts"
click node_audit "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/auditPlanningController.ts"
click node_fieldwork "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/fieldworkController.ts"
click node_projects "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/projectController.ts"
click node_delivery_report "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/deliveryReportController.ts"
click node_documents "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/documentController.ts"
click node_workflow "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/services/workflowEngine.ts"
click node_capabilities "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/services/capabilityEngine.ts"
click node_sod "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/services/sodEngine.ts"
click node_api "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/app.ts"
click node_grc_routes "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/routes/grcRoutes.ts"
click node_project_routes "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/routes/projectRoutes.ts"
click node_db "https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/db.ts"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_web,node_tenant_admin,node_grc_ui,node_audit_ui,node_project_ui,node_document_ui,node_member toneBlue
class node_standards,node_assets,node_risk toneAmber
class node_audit,node_fieldwork,node_projects,node_delivery_report toneMint
class node_documents,node_workflow toneRose
class node_capabilities,node_sod,node_api,node_grc_routes,node_project_routes,node_db toneIndigo
```

## Components

### Workspace experience

- [React workspace](https://github.com/usamasalman/grc-saas-platform-/blob/main/src/App.tsx): `src/App.tsx`
- [Tenant management](https://github.com/usamasalman/grc-saas-platform-/blob/main/src/pages/tenants/TenantManager.tsx): `src/pages/tenants/TenantManager.tsx`
- [GRC workspace](https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/grc): `src/pages/grc`
- [Audit workspace](https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/grc/audit): `src/pages/grc/audit`
- [Project delivery](https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/grc/project): `src/pages/grc/project`
- [Document workspace](https://github.com/usamasalman/grc-saas-platform-/tree/main/src/pages/documents): `src/pages/documents`

### Governance and risk

- [Standards and controls](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/standardsAuthoringController.ts): `grc_wisdom_api/src/controllers/standardsAuthoringController.ts`
- [Asset register](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/assetController.ts): `grc_wisdom_api/src/controllers/assetController.ts`
- [Risk management](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/riskController.ts): `grc_wisdom_api/src/controllers/riskController.ts`

### Audit and delivery

- [Audit planning](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/auditPlanningController.ts): `grc_wisdom_api/src/controllers/auditPlanningController.ts`
- [Audit fieldwork](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/fieldworkController.ts): `grc_wisdom_api/src/controllers/fieldworkController.ts`
- [Project management](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/projectController.ts): `grc_wisdom_api/src/controllers/projectController.ts`
- [Delivery reports](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/deliveryReportController.ts): `grc_wisdom_api/src/controllers/deliveryReportController.ts`

### Documents and reporting

- [Document lifecycle](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/controllers/documentController.ts): `grc_wisdom_api/src/controllers/documentController.ts`
- [Workflow engine](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/services/workflowEngine.ts): `grc_wisdom_api/src/services/workflowEngine.ts`

### API and platform

- [Capability checks](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/services/capabilityEngine.ts): `grc_wisdom_api/src/services/capabilityEngine.ts`
- [Duties enforcement](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/services/sodEngine.ts): `grc_wisdom_api/src/services/sodEngine.ts`
- [Express API](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/app.ts): `grc_wisdom_api/src/app.ts`
- [GRC routes](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/routes/grcRoutes.ts): `grc_wisdom_api/src/routes/grcRoutes.ts`
- [Project routes](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/routes/projectRoutes.ts): `grc_wisdom_api/src/routes/projectRoutes.ts`
- [Prisma database](https://github.com/usamasalman/grc-saas-platform-/blob/main/grc_wisdom_api/src/db.ts): `grc_wisdom_api/src/db.ts`

### Other components

- **Tenant user**

## Connections

- Tenant user → React workspace: uses
- React workspace → Express API: HTTP requests
- Tenant management → Express API: loads and provisions
- GRC workspace → Express API: GRC requests
- Audit workspace → Express API: audit requests
- Project delivery → Express API: project requests
- Document workspace → Express API: document requests
- Express API → GRC routes: dispatches
- GRC routes → Standards and controls: dispatches
- Express API → Prisma database: queries
- Project routes → Project management: dispatches
- Project routes → Capability checks: checks access
- Workflow engine → Capability checks: checks grants
- Workflow engine → Duties enforcement: checks duties
- Workflow engine → Prisma database: reads and writes
- Document lifecycle → Prisma database: reads and writes
- Document lifecycle → Duties enforcement
- Delivery reports → Project management: guards project
- Delivery reports → Prisma database: loads report data