Question 1

Is the eMASS integration on-premises only?

Accepted Answer

Yes. The eMASS integration component deploys on-premises within your enclave. Your eMASS data never transits to a cloud environment. Authentication uses CAC/PIV. This supports IL5+ environments and air-gapped networks. The rest of Advisedly can run SaaS, on-prem, or hybrid depending on your deployment model.

Question 2

Does Advisedly support two-way sync with eMASS?

Accepted Answer

Today, the integration reads from eMASS and crosswalks to Advisedly's assessment engine. Write-back (pushing updated POA&M status, evidence links, or control assessments back to eMASS) is on the roadmap. The current model generates the artifacts and packages you upload during assessment cycles — automating the preparation, not the final submission.