Enterprise architecture & business cases
An isolated workspace for your organisation’s capabilities, systems and business cases, with a 30-day free trial and no card.
During the trial, board-ready outputs carry an evaluation mark. Prefer to stay offline? The single-file edition comes with a subscription or a Decision Sprint.
Demo sign-in is by email, with no password.
Sign in with your organisation’s single sign-on. Passwords, MFA and access policies stay with your identity provider.
Welcome back. We send a one-time code to your email, so there is no password to remember.
New to Struvera?
The Struvera team reviews every new workspace. You will get an email as soon as yours is approved.
Team trials need a work email address. A personal address (Gmail, Outlook and similar) is reviewed before a workspace opens.
You can close this page.
Already have a workspace?
Enter your work email to join.
The full platform, running on this workspace’s model. First time here? Organisation Setup makes it yours, then Assess Coverage records which system supports each capability — every view recomputes from that.
Need the fundable pack built with you? The fixed-fee Decision Sprint is a separate engagement — see pricing. Refunds and cancellation: policy.
Upload an Excel workbook or export one from inside the app (Workbook menu). Here: raw model JSON in and out — no lock-in, ever.
Every save snapshots the previous model (last 20 kept). Restore any of them — the current model is snapshotted first.
Append-only audit trail for this workspace: sign-ins, saves, imports, exports, invites, plan changes.
Entitle the modules this workspace can use — the hosted side of the app’s persona/module gating. EA Core is always included.
For integration platforms (such as Workato), ITSM tools (such as ServiceDesk Plus or ServiceNow) and work trackers (such as Azure DevOps or Jira). A read token reads the model; a write token can also post events. The API description is at /api/openapi.json.
For tools that fetch short-lived tokens instead of keeping a long-lived one. A client has an id and a secret. The tool posts them to /api/oauth/token with grant_type=client_credentials and gets a token that works for one hour. Revoke a client and its tokens stop at once.
Struvera calls your URL when the model is saved, an element is created or updated, an element is deleted, or an event arrives. Each call is signed (HMAC-SHA256) with a key derived from the secret shown once here. A call that fails is retried 3 times. See docs/WORKATO.md for how to verify the signature.
Refused tokens, revoked sessions, removed members and rate-limit refusals for this workspace. Only your own workspace's events appear. Failed sign-ins are listed when the address belongs to your organisation's e-mail domain; other unknown addresses cannot be tied to a workspace and are not listed. Refused requests (403) are listed too.
When on, editors and admins can use AI features in the app. Prompts go from our server to the endpoint you choose, using your key. The key is stored encrypted and is never shown again. Struvera logs who called it, the task, the size and the endpoint host, never the prompt.
Provider: · model · endpoint host · read its data terms
Let your team sign in with Microsoft Entra ID or any OpenID Connect provider. In your provider, register a web application with this redirect address:
Roles beyond admin, editor and viewer. The server checks every save against the role and answers with what was refused. Assign a role in the Team list.
Reads are filtered on the server in the app, exports, the API, MCP and the incident feed. What a member cannot read, they cannot change, and saving never loses what they cannot see.
Permanently deletes every row we hold for this workspace after a 7-day cooling-off, and gives you a deletion certificate. Download the full export first. A card subscription must be cancelled before you can start.
Alerts for admins and @mentions for you. Everything lands here first; a Teams, Slack or email copy is optional.
Sources: failed sign-ins, refused or revoked tokens, repeated 403 denials, rate-limit refusals, a new admin, a new API token or client, AI settings changes, a failing webhook, your own alert rules (checked on every save and daily), storage and trial warnings. Repeats are folded into one alert, and at most 30 messages an hour leave the workspace.
Messages carry alert titles and, for your own alert rules, the names of the items concerned. They never carry e-mail addresses. A Teams or Slack channel and a mail provider are third parties you choose: list them in your own records.
Limit this workspace to approved network addresses. While the list is on, a sign-in cookie or API token used from any other address is refused (403). Save is refused if it would lock you out.
Locked out? Send the code as the X-Break-Glass header with your admin session to /api/network from any address, or ask the platform operator for a reset.
When on, each person's browser sends one anonymous batch a day: how many times each screen was opened. It holds no names, no e-mail addresses, no roles, no model content and no free text, and Struvera cannot tell who sent it. Turn it off and sending stops at once; Purge deletes what was collected.
Which production integrations are configured on this deployment. Booleans only — no secret values ever leave the server.