Total visibility. Data-driven decisions. Transformation that delivers.
Gnarus connects strategy, business capabilities, technical inventory, finance and governance in a single source of truth — with TOGAF A to H, the C4 model and artificial intelligence built in. Born and built for the world.
Increase the success rate of your initiatives
Six outcomes Gnarus delivers from day one — each backed by modules that are already in production.
Optimize technology investment
Per-application TCO, the TIME quadrant and the finances of every Initiative show where to invest, where to hold back and what to retire.
Execute strategy with no missing link
Every Initiative starts linked to an objective, and every technical requirement proves which business need it came from.
Deliver transformation that lasts
Phases A to H each have their own document, a consistency check and publishing with mandatory review and approval.
Create real value with AI
Interviewers fill in phase documents with you, and the MCP server brings your architecture to the AI assistant your team already uses — nothing is saved without confirmation.
Strengthen resilience and compliance
ISO 27001, LGPD and Brazilian CMN Resolution 4,893 assessed against the inventory, a verifiable audit trail and batch rollback of changes.
Govern APIs and integrations
OpenAPI contracts with governance linting, detected shadow APIs and artifact-to-artifact integrations that become arrows in the diagram.
What is alreadyin production, today.
IT complexity is eroding your strategic advantage
The picture of your applications lives in outdated spreadsheets, dead wikis and the memory of a few key people. Simple questions go without a reliable answer: what is critical? What does it cost? Who owns each system? What does this project affect?
Costs that keep climbing
Forgotten licenses, duplicated systems and ownerless cloud. Without the TCO of each application, nobody knows for sure what to cut.
IT adrift from strategy
Projects approved with no link to an objective, requirements lost between the business and the code, and deadlines that slip without warning.
Risk nobody measures
End-of-support technology discovered too late, audits redone from scratch every cycle and knowledge concentrated in a few people.
A single source of truth for enterprise architecture
Every link is navigable and auditable: from the strategic objective to the code repository of the artifact that supports it — and back.
Strategy
Business Units, OKRs and Initiatives, with budget and deadline.
Business
Business domains in 4 levels (L0 to L3).
Applications
C4 inventory: application, provider, component, artifact and the integrations between them.
Governance
Decisions (ADR), deviations, Change Requests, releases and compliance.
Built-in methodology: TOGAF (phases A–H), C4 Model, ADRs and traceability are part of the product, not of a separate manual.
Native AI: inside Gnarus and in the assistant you already use
Agents with your company’s knowledge, in the flow of work — not an add-on billed separately. And nothing is saved without your confirmation.
Phase A to F InterviewersNew
An agent talks to you, asks one section at a time, writes the phase document text and only saves after you confirm. Customize a copy for your workspace.
AI in the inventoryNew
“Suggest description with AI” on the Application, Provider, Component and Artifact forms — you review before saving.
Agents your company configures
Model, temperature, prompt, starter questions and visibility — without depending on a data team.
Context from corporate documents
Document Boxes and skills make the copilot answer with your company’s standards, not generic knowledge.
Multi-provider
Anthropic, OpenAI, Groq or your own endpoint — keys always encrypted (AES-256).
Market data, not guesswork
End-of-support answers use real dates synced from endoflife.date.
Phase A to F Interviewers in the agent catalog: use them as is or customize.
AI Module
Agents right in the flow of work, with the context of your architecture and your company documents.
Interviewers fill in the Phase A to F documents with you, one section at a time.
Description suggestions on records and detection of possible duplicates.
You choose the provider (Anthropic, OpenAI, Groq or your own) and the model for each agent.
Gnarus MCP server
Connect an MCP-compatible AI assistant — such as Claude — and it gets to know your company’s architecture: more than 130 tools, with your personal token as the credential.
Queries the inventory, reports, BR → TR traceability, Wiki and Planner in natural language.
Creates diagrams, fills in phase documents, suggests building blocks and checks an Initiative’s TOGAF completeness.
Every write goes through a simulation and a single-use confirmation — nothing changes without your approval.
In natural language
“Which critical applications run on out-of-support technology?” or “fill in Phase B of this Initiative with me”.
On the real inventory
Agents use Gnarus MCP tools on your company’s data — Initiatives, systems, diagrams, building blocks.
Answers with your own data
If the action would save something, you see first what will be done and confirm. Without confirmation, nothing changes.
From budget to deadline: the portfolio under control
What used to require a parallel spreadsheet now comes from the same inventory your architecture lives in — same data, same owners, same history.
Know where to invest and where to hold back — before the overrun
Versioned budget by line item (CAPEX and OPEX), actual costs with supplier, contract and invoice, and a forecast of what is left to spend. Every Initiative gets a signal: Hold back, Attention or On course.
See what is going to slip while there is still time to act
The Timeline tab brings together in a Gantt chart the Initiative period, the Transition Architectures, the Work Packages with their dependencies, the milestones and the releases. The today line and late items show up at a glance.
Find the high-cost, low-value applications
Record license, maintenance, support and cloud on each application record and see the annual TCO by category, BU, Area and TIME quadrant — with the candidates for a decision highlighted.
Operational TOGAF, not a consulting slide
Each phase from A to H has its own document inside the Initiative — with guided sections, a consistency check, mandatory review and approval, versioning and PDF export.
Management
Phases A to D with guided templates
Vision, Business, Information Systems and Technology with ready-made blocks instead of a blank page — and AI Interviewers that fill them in with you.
Phase E — opportunities per BRNew
One document per business requirement, with gaps, risks, work packages, transition architectures and milestones linked to the BR, AR and TR.
Phase F — migration planNew
Estimates and prioritization per TR, Planner cards with dates, points and squad, and the BR → AR → TR chain assembled automatically, with the gaps in plain sight.
Phase G — implementation governanceNew
Architecture contract, compliance review of each Transition Architecture and every deviation handled as a Change Request, with a Planner card.
Phase H — change managementNew
Every ADR, Non-Conformity and Change Request gets a decision with an owner and a date; approved artifacts enter the CMDB for reuse.
Solution and Technical Architecture Documents
A Solution Document per Initiative, with child Technical Architecture Documents in a tree, revision history and PDF export.
Nothing gets published with a gap
Before publishing, the consistency check points out what is unlinked — a TR without a card, a risk without a TR, a dependency that inverts priority — and tells you exactly which section to fix.
17 reports ready from day one
The data the inventory already collects — criticality, lifecycle, cost, deadlines, owners — becomes an executive view in one click, filtered by BU, Area and segment and exportable to Excel and CSV.
Portfolio & finance
Where the money, the value and the deadlines are.
- Criticality × Business Impact — how critical each application is and how big the impact would be if it failed.
- TIME Portfolio — Tolerate, Invest, Migrate, Eliminate.
- Landscape by Business Domain — the map of applications by business domain.
- Domain Coverage — the L0 to L3 tree and the domains that still have no application.New
- Financial portfolio — budgeted, actual and estimate at completion for every Initiative.New
- Application costs (TCO) — by category, BU, Area and TIME quadrant.New
- Running projects — deadlines — delay, completion, next milestone and deviation from the baseline.New
- Portfolio Distribution — application counts by category, segment, BU or area.
Risk & governance
What can go wrong — and who is accountable.
- Compliance — ISO 27001, LGPD and CMN Resolution 4,893, citing the standard and the evidence for each point.New
- Data Quality — completeness of each record and consistency of what was filled in.New
- Possible Duplicates — similar records, with the evidence.New
- Obsolescence Risk — applications with end-of-life technology, ranked by criticality.
- Security Exposure — internet-facing applications crossed with their criticality.
- Governance — applications without an owner and planned decommissions.
- Impact Analysis — the blast radius of a system or a BU.
Technology
The lifecycle of your stack, with market data.
- Technology Radar — maturity by lifecycle phase, Tech Radar style.
- Technology Obsolescence — real end-of-support dates (endoflife.date) crossed with the artifacts that depend on them.
Out-of-the-box capabilities that speed up time to value
From technical inventory to strategic governance, in a single integrated platform.
C4 Technical Inventory
Record and browse Applications, Providers, Components and Artifacts organized in the 4 levels of the C4 Model, with a completeness bar on the Application list and record.
BUs, OKRs and Initiatives
Organize Initiatives under OKRs, grouped by Business Unit (BU) and Area. Budget, sponsors and squads tied to the strategic chain.
Initiative financeNew
Versioned CAPEX/OPEX budget, cost entries with supplier and invoice, valued Planner hours and the financial health of each Initiative.
Timeline and ReleasesNew
Gantt with Transition Architectures, Work Packages, milestones and decisions; releases that record which version of each artifact shipped in each delivery.
C4 Diagram Editor
Diagrams with C4 stencils, automatic versioning, an enlargeable preview with zoom and shapes linked to inventory records.
Stencil BuilderNew
Build the company’s shape libraries from a drawing (.drawio, .svg): properties, links to the inventory, labels per language, versions and obsolescence.
IntegrationsNew
Record what connects one artifact to another — source, target, protocol, authentication, sync or async, VPN and the catalog API. Diagram arrows link to them.
ADR — Architecture Decisions
Architecture Decision Records with context, decision, consequences and alternatives, and traceable supersession between related ADRs.
Non-Conformities
Architecture deviations with severity (Critical, High, Medium, Low), root cause, corrective action, deadline and evidence.
Business Domains and Functions
Hierarchical capability map (L0 to L3), loadable by industry, linked to the applications and containers that support each function.
Building Blocks (ABB/SBB)
A library of corporate patterns — abstract and concrete — with points of attention, revision history, diagram models and prototypes.
CMDB Importer
Bring your current inventory from ServiceNow or a CSV with score-based deduplication and a pending queue for human review before publishing.
Custom fields and forms
Your own fields (16 types, including relations to other records and files) on any entity — even domain levels — and drag-and-drop forms.
Planner Module
Kanban board with work items, cycles, squads, points and time tracking — linked to Initiatives, TOGAF phases and Change Requests.
Governance Ceremonies
Architecture approval boards with candidacy, a voting board and versioned decisions — the governance ritual, not just the record of it.
Automatic discovery
Connectors for Microsoft Entra ID, Azure Resource Graph and Kong — the inventory updates itself instead of relying on manual entry.
CollaborationNew
Comments with mentions on Applications, ADRs and Non-Conformities, a notification bell and saved views you can share with the team.
AcademyNew
Courses with subtitled video lessons, learning paths, per-person progress and a certificate with a code anyone can validate.
One inventory, many ways to use it
Executive answers in one click
17 reports and a card dashboard — portfolio, risk, cost and deadlines — without asking the team to build slides.
See reports →
Budget and deadlines without a side spreadsheet
Budgeted, actual and forecast per Initiative, Planner hours as cost and a signal of where to hold back.
See investment →
TOGAF A to H, for real
Guided phase documents, consistency checks and traceability all the way to the Change Request.
See TOGAF →
C4 inventory and living diagrams
Applications, containers, components and artifacts in 4 levels — and diagrams that warn you when they drift from the records.
See C4 →
Compliance and audits without the rush
ISO 27001, LGPD and CMN 4,893 against the inventory, SSO/SCIM and an audit trail with rollback.
See security →
Migration without retyping everything
CMDB importer with deduplication — your current inventory comes in within minutes, not months.
See migration →Diagrams that keep up with the inventory — not snapshots of a moment
In many tools, a diagram is out of date the next day. In Gnarus, every shape knows what it represents and warns you when the drawing and the records drift apart.
Stencil Builder
Company shape libraries with properties, links to the inventory, labels in several languages, light and dark previews, versions and obsolescence control.
Update shapes
Brings a drawing’s shapes to the library’s published version without losing values, links, position, size or connections.
Check records
Shows where the drawing differs from the inventory — and resyncs in one click. Nothing changes until you confirm.
Arrows that are integrations
Each connector can point to a registered Integration and warns when it connects shapes outside the library’s rules.
Check records: does the drawing differ from the inventory? Gnarus shows what, field by field.
Update shapes: a new library version applied without losing links or position.
Inventory structured in the 4 C4 levels
Every entity in the platform maps directly to a C4 level — from the system as a whole down to the code artifact.
Application — System Context
View of the system and its external actors, with BU, business domain and cost. Groups child containers.
Container (Provider) — APIs, Databases, Frontends
Deployable units with technology, hosting, vendor and lifecycle.
Component / Domain
Internal modules of a container, mapped to business functions.
Artifact — Workers, Libs, APIs
Technical units with repository, pipeline, SLA, RPO/RTO and the integrations that connect them.
Process and control built into the inventory
The platform is not just a catalog — it embeds the governance mechanisms that ensure traceability and compliance of architecture decisions.
Architecture Decision Records
Every decision with context, rejected alternatives and consequences. ADRs supersede one another with full traceability.
Non-Conformities
Deviations from the standard with severity, root cause, corrective action and deadline. Flow: Open → In Progress → Resolved — and a compliance finding becomes an NC in one click.
Change Requests
Implementation deviations become a Change Request linked to the TR or AR, with a Planner card: completing the card closes the CR in the document.
Ceremonies (ARB)
Candidacy to the architecture review board, a voting board and versioned decisions, straight from the phase document.
Solution Document
The Initiative document with a rich editor, versioning and controlled publishing.
Technical Architecture Document
Technical child documents of the Solution, covering specific domains — organized in a tree inside each Initiative.
From strategy to the code artifact
Every element in the platform is part of a traceability chain that connects business decisions to technical implementations.
Auditable end to end — every technical requirement proves which business need it came from, and every Change Request shows which requirement it changed.
An inventory you can trust
An outdated inventory is worse than none. Gnarus continuously measures, chases and fixes data quality.
Data QualityNew
Measures how complete each record is and flags what is filled in but makes no sense: a retirement phase with Active status, a critical application without an owner, a non-existent domain, an invalid URL.
Data maintenance surveysNew
Administrators ask each owner to confirm or update the items in their care — for example, those not reviewed in months. The request arrives in the notification bell.
Batch audit, with rollbackNew
Changes grouped by operation and a whole batch undone with a preview. If someone changed the same field afterwards, Gnarus warns you and does not overwrite it.
Your current inventory comes in within minutes, not months
CMDB importer with assisted deduplication — no manual spreadsheet, no retyping.
Upload
Send a ServiceNow export or a CSV from your current CMDB or spreadsheet.
Score-based deduplication
The importer compares similar records and flags likely duplicates with a score.
Pending queue
Human review before publishing — nothing enters the inventory without confirmation.
API governance, built into the inventory
In many platforms, cataloging and governing APIs is a second tool, bought separately. In Gnarus, it is a module that already talks to the rest of the inventory.
OpenAPI editor with governance linting
Your organization’s rules applied in real time — documentation, design and security scored by dimension.
Semantic versioning gate
Breaking changes stay blocked until they become a major version.
Shadow APIs and gateway drift
Routes exposed outside the catalog go into an automatic regularization queue.
Integrations tied to the contractNew
Each inventory Integration points to the catalog API: the contract, the owner and the drawing describe the same thing.
The platform with your company’s look
Logo, name, colors and a style per module — with contrast checked before publishing, so visual identity never costs readability.
Appearance per module, with a live preview before publishing.
Connected to everyone who already works with your architecture
Open APIs, external agents and company knowledge in one place.
Public MCP server
More than 130 tools open the inventory to external AI assistants, with a personal token as the credential. Before creating or changing anything, the assistant shows a simulation and only saves after a second confirmation.
Wiki Module
Company documentation organized in spaces and pages, with versioning, an adjustable sidebar and single sign-on — on top of each Initiative’s TOGAF documentation.
Public API, webhooks and BI
Public API, webhooks/Teams, Jira and Azure DevOps links and a native OData feed for Power BI — no spreadsheet exports.
Academy and User guide
In-product training with courses, learning paths and certificates, and a complete user guide in 4 languages.
A superior method, at a fraction of the cost.
Spreadsheets do not scale. Global application portfolio platforms solve the inventory — but treat TOGAF, requirements traceability, Initiative finance and AI as an exception or an add-on.
| Capability | Spreadsheets | Gnarus Platform | Global platforms |
|---|---|---|---|
| Native TOGAF documentation (phases A–H) | No | Yes | Rare |
| Requirements traceability BR → TR → Change Request | No | Yes | No |
| Formal ADRs with supersession chain | No | Yes | Rare |
| Native AI in the flow of work | No | Yes | Add-on |
| Initiative finance and application TCO | Partial | Yes | Add-on |
| Diagrams that check against the inventory | No | Yes | Rare |
| Brazilian regulatory compliance (LGPD, CMN 4,893) | No | Yes | Rare |
| Affordable for the mid-market | Yes (but does not scale) | Yes | No |
Grow at your own pace — pay for what you use
Two combined pricing axes: how many people use the platform and how many systems you have mapped in it. The architecture core and AI come standard in every plan — never an upsell.
Per named user
Administrator and Architect count in full; Manager counts 0.7×; Viewer is unlimited from Professional up — broad visibility should not hold back team adoption.
Per CMDB asset
Tiers by number of registered Systems (up to 100 · up to 500 · up to 2,000 · on request) — reflects the real coverage of your portfolio, not just how many login accounts exist.
Starter
A first architecture team structuring the portfolio.
- EA/CMDB core + TOGAF A–H + traceability
- AI (AI Module) with a monthly usage limit
- Up to 100 CMDB assets
- Email support
- Wiki Module, public API/MCP, Planner, Discovery
Professional
An established architecture department, multiple BUs.
- Everything in Starter, with no practical AI usage limit
- Up to 500 CMDB assets
- Wiki Module + public API + MCP included
- Planner, Discovery and Ceremonies as standalone add-ons
- Priority support
Enterprise
The whole organization, multiple business units.
- All modules included: Planner, unlimited Discovery, Ceremonies, Sandbox
- Governance Module — API governance
- SSO/SCIM + advanced audit
- Tailored CMDB assets
- SLA and a dedicated account manager
Seat mix is a starting point, not a ceiling: every plan lets you buy extra seats per profile, and no module requires upgrading the whole plan for the team to try a single feature. Talk to the team for a proposal calibrated to the size of your portfolio.
Access control and compliance, in production
What is already live — and what is on the way, with no empty promises.
Enterprise SSO (OIDC/SAML) + SCIM
Federated sign-in with automatic user provisioning, at no extra charge — validated end to end against a real identity provider in production.
Compliance reportNew
See whether the inventory meets ISO 27001, LGPD and, for financial institutions, CMN Resolution 4,893 — citing the standard and the evidence, with justified risk acceptance and a PDF for the audit.
Verifiable audit trail
Every change is recorded in a hash chain (SHA-256) — if anyone tampers with a record, the break is detected. A dedicated console for querying and exporting.
Multi-workspace and roles
Workspaces isolate subsets of the portfolio; OWNER, ADMIN, MEMBER and VIEWER roles and access profiles control what each person sees and edits.
Revocable sessions
Short-lived access tokens with automatic renewal; any session can be ended remotely on the “My Sessions” screen.
Vacation access lockNew
Administrators can lock out people on vacation: they are signed out and cannot sign in (password or SSO) until released.
Encrypted secrets
Keys for AI providers and external integrations are always encrypted (AES-256), never stored in plain text.
Privacy by default (LGPD)New
Versioned acceptance of the Terms of Use and the Privacy Policy at sign-up and on every new version, and explicit consent when collecting contact data.
AI with confirmationNew
Internal agents and external assistants via MCP show what they will do before saving — without confirmation, nothing changes in the inventory.
A public, honest roadmap: SSO, SCIM, the audit trail and the Compliance report are already in production. Still in progress: named certification with Okta and Microsoft Entra (today: compatible with any open OIDC/SAML provider) and formal certifications of the platform itself (SOC 2, ISO 27001) — nothing on this page describes a feature that does not exist yet.
Born and built for the world.
Gnarus’s differentiators are not local — the TOGAF method, end-to-end traceability and native AI are valuable in any market. We invest in three layers at once, so that each one funds and credentials the next.
Interface in 6 languages, guide in 4
Portuguese, English, Spanish, Italian, German and Japanese in the interface; the user guide and this page in 4 languages. Next steps: data residency aligned with LGPD/GDPR and the first formal certifications (SOC 2, ISO 27001).
Operational TOGAF as a lasting differentiator
While global leaders sell inventory, Gnarus embeds the process — TOGAF A to H, traceability and ADRs are part of the product. We keep investing in that before competing on feature lists alone.
Every new customer credentials the next market
We start with mid-sized and large Brazilian companies that global leaders ignore on price. Measurable reference cases come before each expansion — Latin America, then beyond.
“The path exists — other enterprise architecture platforms started regional and became a global standard within a decade. We have the method and the native AI they did not have at the start.”
FAQ
How much does it cost?
The Starter, Professional and Enterprise plans combine pricing per named user and per CMDB asset — see the full structure in Plans or talk to the team through the “Schedule a demo” button for a proposal calibrated to your portfolio.
How do I migrate my current inventory?
Use the CMDB Importer: upload a ServiceNow export or a CSV, review the duplicates flagged by score and publish. See the Painless migration section.
Does Gnarus track Initiative budgets and deadlines?
Yes. Each Initiative has a versioned CAPEX/OPEX budget, cost entries (including CSV imports and Planner hours valued by role), an estimate at completion and a Gantt chart with milestones and dependencies. The Financial portfolio and Running projects — deadlines reports bring it all together. See Investment & timelines.
Does the AI save data on its own?
No. Interviewers and description suggestions write text for you to review, and external assistants connected through MCP show a simulation before creating or changing anything. Nothing is saved without your confirmation.
Which standards does the Compliance report cover?
ISO 27001, LGPD (the Brazilian data protection law) and, for financial institutions, CMN Resolution 4,893 — citing the standard and the evidence for each point. You can accept a risk with a justification, turn a finding into a Non-Conformity and download the report as a PDF.
Do diagrams go out of date when the inventory changes?
They do not have to. Shapes are linked to records, “Check records” shows where the drawing drifted from the inventory and “Update shapes” brings the drawing to the latest library version without losing links or position.
Where is my data stored?
On our own infrastructure, with practices aligned with LGPD. Full details in the Privacy Policy.
Is the platform LGPD compliant?
Yes — acceptance of the Terms of Use and the Privacy Policy is recorded per version, contact capture requires explicit consent and you can request access to, correction of or deletion of your data at any time.
Is it self-hosted or SaaS?
Today we operate as SaaS on our own instance. Dedicated self-hosted deployment is on the roadmap — talk to the team if that is your case.
How do support and training work?
Direct support from the product team during the initial adoption period, a complete user guide in 4 languages and the Academy inside the platform, with video courses and certificates.
What is next on the roadmap?
Already available: TOGAF A to H, Initiative finance and timelines, application TCO, 17 reports and a dashboard, Compliance, Stencil Builder, Integrations, SSO (OIDC/SAML) + SCIM, an audit trail with rollback, public API, webhooks, Discovery (Entra ID/Azure), Jira/Azure DevOps, Power BI, API governance, Planner, Ceremonies, Academy and the MCP server. The next horizons are named identity-provider certifications, formal certifications (SOC 2/ISO 27001) and multi-region operation — see Security & compliance and Vision.
See Gnarus with your own portfolio
In a guided demo, we show how to move from spreadsheets to a single source of truth — with TOGAF, C4, Initiative finance, compliance and AI in one place.
Or get product news by email: