env0

Connect env0 to collect infrastructure evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In env0:

   1. In env0, go to Organization Settings and select the API Keys tab.
   2. Click + to open the create API key modal and keep the default Admin role.

   env0's public documentation does not cover every step.

   Source: docs.envzero.com, checked 2026-10-07.

   The permissions Safeguard needs: Organization Admin. env0 shows the full user list only to administrators, so this credential must belong to one. Safeguard only reads with it.

2. On Compliance › Connectors, open env0, click Connect, choose API token and fill in:

   Field	What to enter
   Organization ID	Required.
   API key ID	Required.
   API key secret	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read env0 and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Infrastructure connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks