Page reference
Route-by-route map of every user-facing page in the Noru application and its documentation.
This reference covers every page.tsx route under apps/app/src/app. Route groups such as (routes),
(fullpage_routes), and (public) organize layouts but do not appear in the URL.
| Route | Purpose | Documentation |
|---|
/ | Compliance or privacy operating dashboard | Overview |
/controls | Control directory, coverage, owners, and status | Controls |
/controls/[id] | Control guidance, evidence requirements, notes, owner, and status | Controls |
/evidence-vault | Automated/manual evidence directory and validation | Evidence Vault |
/evidence-vault/[id] | Legacy deep link; redirects to the vault selection | Evidence Vault |
/policies | Policy directory, approval actions, and master list | Policies |
/policies/[id] | Policy editor, properties, versions, controls, history, and export | Policies |
/assets | Asset inventory, ownership, classification, and risk | Assets |
/data-sources | Integration catalog, connection health, evidence and job status | Data Sources |
/data-sources/[id] | Configure, sync, reauthenticate, inspect, or disconnect one integration | Data Sources |
/security/findings | Security/configuration finding triage | Findings |
/security/findings/[id] | Finding properties, provenance, asset/risk links, and closure | Findings |
/security/certificates | Monitored domains and Certificate Transparency records | Certificates |
/risk/register | Risk directory and inherent/residual matrices | Risk register |
/risk/register/create | Create and initially assess a risk | Risk register |
/risk/register/[id] | Risk detail, treatments, relationships, and residual assessment | Risk register |
/risk/reports | Live report previews and generated report snapshots | Reports |
/tasks | Work assigned through policies, risks, evidence, controls, vendors, and treatments | Tasks |
/cortex | New AI-assisted compliance conversation | Cortex |
/cortex/[id] | Saved Cortex conversation and working state | Cortex |
| Route | Purpose | Documentation |
|---|
/personnel/directory | Canonical personnel, identities, assets, vendors, training, and signatures | Personnel directory |
/personnel/[id] | Legacy deep link; redirects to the directory with the person selected | Personnel directory |
/personnel/awareness | Training plans, campaigns, audiences, and completion | Training and acknowledgement |
/training/attest/[assignmentId] | Public recipient training/policy attestation experience | Training and acknowledgement |
/vendors/register | Vendor inventory, risk, status, owner, and assessment launch | Vendor register |
/vendors/register/[id] | Vendor overview, risk, privacy, evidence, assessments, personnel, and activity | Vendor register |
/vendors/questionnaires | Vendor-assessment template directory | Questionnaires |
/vendors/questionnaires/[templateId] | Questionnaire template builder | Questionnaires |
/vendor/assessment/[assignmentId] | Public vendor respondent experience | Questionnaires |
| Route | Purpose | Documentation |
|---|
/audit | Redirects to the audit calendar | Audit |
/audit/calendar | Shared internal/external audit schedule | Audit calendar |
/audit/internal | Internal audit register and creation | Internal audit |
/audit/internal/[id] | Internal audit report editor, finalisation, and export | Internal audit |
/audit/external | External engagement register and package builder | External audit |
/trust-center | Draft, preview, publish, and unpublish the trust page | Trust Center |
/trust-center/requests | Review public requests for private certificate files | Trust Center |
/trust/[trust-id] | Public trust-center page | Trust Center |
| Route | Purpose | Documentation |
|---|
/privacy | Privacy operating overview and priorities | Privacy |
/privacy/data-map | Systems, datasets, activities, sources, and changes | Data map |
/privacy/ropa | Processing register, review, approval, relationships, and export | RoPA |
/privacy/review | Drift and connector-proposal decisions | Review queue |
/privacy/assessments | Assessment queue and creation | Assessments |
/privacy/assessments/[id] | Assessment narrative, risks, evidence, outcome, and residual risk | Assessments |
/privacy/monitoring | Watched-site register and latest scan state | Monitoring |
/privacy/monitoring/[monitorId] | Pending monitor or redirect to latest completed scan | Monitoring |
/privacy/monitoring/[monitorId]/scans/[scanId] | Full scan evidence, issues, recommendations, and history | Monitoring |
/privacy/grants | Connected-app grant report | Connected apps |
/privacy/settings | Controller context, regulations, regions, and security measures | Privacy settings |
API route handlers and webhooks are integration surfaces rather than pages, so they are documented through
Data Sources, Settings/Developer, and the API/MCP material linked from the application.
