Skip to content

Drift Monitoring

Infrastructure changes after deployment. ComplyForm watches for compliance drift and alerts you before auditors do.

The default drift detection mode (Team+). ComplyForm runs a daily compliance scan, compares scores against the previous baseline, and alerts when the score drops below your threshold.

Terminal window
# Set up drift monitoring for a dashboard project
complyform drift configure \
--project=my-gcp-project \
--frameworks=soc2,hipaa \
--schedule=daily \
--threshold=5

The --threshold value is a percentage-point drop that triggers an alert. A threshold of 5 means: alert if the compliance score drops by 5 or more points since the last scan.

Drift Report — my-gcp-project
Framework: SOC 2 Type II
Previous score: 94.2% (2026-03-22)
Current score: 89.7% (2026-03-23)
Delta: -4.5 points
Status: WITHIN THRESHOLD (threshold: 5)
New failures:
FAIL CC6.1.3 google_compute_instance.api_server
Disk encryption disabled after manual console change

Configure email and webhook alerts for drift events.

Terminal window
complyform drift alerts \
--email=platform-team@example.com \
--webhook=https://hooks.slack.com/services/T00/B00/xxxx \
--threshold=5

Alerts fire when the compliance score drops below the configured threshold. Each alert includes the affected resources, failed controls, and a link to the dashboard timeline.

The ComplyForm dashboard displays a drift timeline and score trend chart for each monitored project. The timeline shows:

  • Score snapshots over time (daily or event-driven)
  • Drift events with root-cause resource changes
  • Remediation actions taken and their impact on the score

Cloud-specific setup instructions for event-driven mode: