Torii

Connect Torii to collect user access review evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Torii:

   1. Sign in to your Torii account.
   2. Navigate to the Settings view.
   3. Select API Access from the left navigation, then select the Generate API Key button on the top right.
   4. In the Choose type section, select Torii API.
   5. Copy the API key value right away and store it safely, then paste it into Safeguard.

   Torii shows the secret only once, so copy it before you leave the page.

   Torii's getting-started page describes a Torii API key with Full Access and documents no read-only option, so least privilege cannot be narrowed further from the published docs. Torii states the key value cannot be seen again after creation. Role requirements for API Access were not stated on the fetched page.

   Source: developers.toriihq.com, checked 2026-10-07.

2. On Compliance › Connectors, open Torii, click Connect, choose API token and fill in:

   Field	What to enter
   API key	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Torii and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• User Access Review connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks