Governance Concepts
Assessment snapshot
A fingerprinted record of one assessment result, stored so the next one can state what changed without re-deriving it from the current run.
What it is
A small machine record written beside each pack: the scores, the bands, the confidence, the materiality distribution, and the identifiers of the controls that were failing and passing.
Why it exists
A comparison must rest on two stored measurements. Inferring what changed from the current assessment alone is not a comparison, it is a guess.
How GovIntel protects it
It stores no customer identifiers. Control identifiers are the scanner's, resource identity is carried as fingerprints, and the account identifier is fingerprinted too. It names no resource and no account, which is what makes retaining it longer than the raw evidence defensible.
It also carries a scoring fingerprint, so the next assessment can tell whether the two results are comparable at all.
What it does not mean
It is not a copy of the board pack, not a customer deliverable, and not the evidence set. It is a machine record, and it is never delivered.