Portainer

Connect Portainer to collect cloud infrastructure evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Portainer:

   1. Sign in to Portainer as the user Safeguard should connect as.
   2. Click your username in the top right and select My account.
   3. Scroll to the Access tokens section and click Add access token.
   4. Enter a Description, re-enter your password, and click Add access token.
   5. Copy the access token and keep it in a safe place: you will not be able to view it again. Click Done.

   Where to find the other values:

   • Base URL: The https address you use to open your Portainer instance.

   Portainer shows the secret only once, so copy it before you leave the page.

   Source: docs.portainer.io, docs.portainer.io, checked 2026-10-07.

   The permissions Safeguard needs: administrator. Portainer shows the full user list only to administrators, so this credential must belong to one. Safeguard only reads with it.

2. On Compliance › Connectors, open Portainer, click Connect, choose API token and fill in:

   Field	What to enter
   Base URL	Required. Your own server: an https address reachable from the internet.
   Access token	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Portainer and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Cloud Infrastructure connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks