Documentation & API Reference
Everything you need to integrate, extend, and get the most out of the NexusGRC platform. From quick-start guides to full API specs.
Getting Started
Begin here. These guides cover the fundamentals of setting up and using NexusGRC.
Quick Start Guide
Get up and running with NexusGRC in under 15 minutes. Configure your first tenant, import your org structure, and run your first AI-assisted audit.
Authentication & SSO
Set up authentication with Clerk (development) or Keycloak (production). Configure SAML SSO, RBAC roles, and multi-tenant access.
Data Model Overview
Understand the organizational reference model: entities, processes, owners, and how every GRC object connects back to your org structure.
Security & Compliance
Row-level security, encryption at rest and in transit, audit logging, and our roadmap to SOC 2 Type II.
API Reference
NexusGRC exposes REST and GraphQL APIs for every module. Full OpenAPI 3.1 spec available.
REST API (OpenAPI 3.1)
Full REST API with OpenAPI 3.1 specification. Covers all 14 GRC modules with consistent resource patterns, pagination, filtering, and bulk operations.
GraphQL API
Flexible GraphQL endpoint for complex queries across related GRC objects. Ideal for dashboards, reporting, and cross-module data retrieval.
Webhooks
Subscribe to real-time events across all modules. Configure webhook endpoints for risk events, audit completions, compliance changes, and agent actions.
SDKs & Tools
Official client libraries and developer tools.
Integration Guides
Connect NexusGRC with your existing tools and infrastructure.
Jira & ServiceNow
Bi-directional sync of issues, findings, and remediation tasks with your ITSM platform.
Slack & Teams
Real-time notifications, approval workflows, and AI agent interactions directly in your messaging platform.
Okta & Azure AD
Identity provider integration for user provisioning, deprovisioning, and directory sync.
AWS, Azure & GCP
Cloud configuration monitoring, evidence collection, and automated compliance checks across your cloud infrastructure.
Splunk & Datadog
Security event ingestion for continuous monitoring and automated risk scoring from your SIEM.
SAP & Oracle
ERP integration for SOX compliance, segregation of duties analysis, and financial control testing.
Architecture Overview
Event-Driven Core
All domain events are published to Apache Kafka. AI agents, notification services, and analytics pipelines subscribe independently, enabling loose coupling and horizontal scalability across all 14 GRC modules.
Multi-Tenant Isolation
Row-level security in PostgreSQL ensures complete tenant isolation at the database level. Each API request is scoped to the authenticated tenant with zero possibility of cross-tenant data leakage.
AI Agent Orchestration
Eight specialized agents (AuditBot, RegMapper, RiskSentinel, SOXBot, AIGuard, EvidenceHunter, NarratorAI, CoPilot) are orchestrated via LangGraph and Temporal.io for reliable, auditable automation.
Polyglot Persistence
PostgreSQL for transactional data, ClickHouse for analytics, Neo4j for relationship graphs, and Redis for caching. Each data store optimized for its workload pattern.
Need help getting started?
Our developer relations team is here to help you integrate NexusGRC into your workflow.