Savings recovery docs.

Overview

A savings-first map of the entire documentation set, organized around what teams actually do: connect, find waste, approve, prove savings.

Getting Started

A 30-minute path from signing in to your first verified savings receipt — first scan, first finding, first approved action, first 7-day verification.

Onboarding Guide

Multi-team rollout: invite Admin, FinOps, Security and Auditor roles, configure SSO/SAML, set tag policies, and align on guardrails before going wide.

Plans & Features

What is included in Free, Pro, Business and Enterprise: connector limits, action modes, AI Copilot quotas, SSO, SCIM, audit retention, and HSM key controls.

All Guides

Index of every task-oriented walkthrough, grouped by FinOps, Security, Governance and AI workflows.

Connect Cloud

Step-by-step IAM role setup for AWS (cross-account role), Azure (Service Principal + reader), and GCP (service account JSON) — with the exact least-privilege policies.

Approve a Savings Action

From a finding in the queue to an executed action with rollback evidence: conflict-guard checks, approval modes, and verification windows.

Commitment Optimizer

Build Reserved Instance and Savings Plan recommendations across AWS/Azure/GCP, with break-even modeling and commitment risk scoring.

Zombie Resources

Find and remove idle volumes, snapshots, public IPs, NAT gateways, low-traffic load balancers, and underutilized databases — safely.

GreenOps & Carbon

Use carbon-spike findings as a secondary cleanup signal — region migration, instance generation upgrades, and orphan resource elimination tied to emissions.

VM Scheduling

Define start/stop windows, holiday calendars, and override exceptions for non-production compute. Includes maintenance window coordination.

Ownership Tag Remediation

Configure required tags (owner, cost_center, environment), dry-run scope-level fixes, and apply ownership tags using provider-native tag APIs.

AI Copilot Action Plan

Use the AI Copilot to draft a multi-step remediation plan from natural language, then convert each step into a draft action request with audit trail.

Finn AI Action Plan

Run the Finn AI assistant on FinOps queues to produce prioritized action plans, ranked by ROI, risk and effort.

AI Usage Monitoring

BYOAI: connect OpenAI, Azure OpenAI, Anthropic and Gemini billing endpoints to track per-feature, per-customer and per-prompt cost.

Alerts & Routing

Configure Slack/Teams channels, owner-based routing, and severity thresholds for savings opportunities, anomalies and action lifecycle events.

Evidence Bundle

Generate downloadable proof packs (CSV/JSON) for any approved action: pre-baseline, conflict checks, execution log, post-action verification.

Modules

Today, Savings, Costs, Risk, Inventory, Automation and Settings — what each top-level module surfaces and when to use it.

Dashboards & Metrics

Definition of every KPI: estimated vs realized savings, FinOps/Security/Governance/Audit scores, anomaly signals, and unit economics.

Reporting & Exports

CSV/JSON exports for findings, resources, audit logs, evidence artifacts and chargeback reports — with API equivalents.

Notifications & Alerting

Channel taxonomy, throttling rules, and the dispatch contract for Slack, Teams, email and webhook integrations.

Detection Catalog

Every implemented rule across FinOps, Security, Governance and Audit — provider coverage, severity bands, fixable flag, and required evidence fields.

Action Engine

How the conflict guard, approval chains, idempotency keys, rollback playbooks and post-action verification fit together.

Analytics Validation

How realized savings are computed: pre-action baseline windows, post-action checkpoints (7/14/30 days), regression detection.

Integrations

Jira, ServiceNow, Slack, Teams, OpenAI, Azure OpenAI, Anthropic, Gemini — config, permissions, test connection, and webhook setup.

API & Automation

REST and SCIM endpoints, authentication (Supabase JWT + tenant context), pagination, idempotency, and rate limits.

Benchmark Analysis

How TurboFinOps compares with CloudHealth, Apptio Cloudability, Vantage and Spot.io — focused on proof quality and action execution.

Security Model

Tenant isolation guarantees, encryption-at-rest with envelope encryption + HSM (AWS KMS / Azure Key Vault / GCP Cloud KMS), credential rotation, key cutoff policy.

Data Handling

What we collect (resource metadata, billing snapshots), what we never collect (workload data, customer PII), retention windows, region pinning (EU-west-2 default).

Production Readiness

Pre-launch gate checklist: SSO enforced, audit retention configured, action approvers set, alerting wired, evidence retention validated.

Support & Escalation

Severity definitions, response SLAs by plan, escalation contacts and incident war-room procedure.

Troubleshooting

Common scanner failures (missing IAM permissions, region restrictions), pricing service mismatches, and webhook delivery issues with diagnostics.

FAQ

Frequently asked questions on plan limits, RBAC roles, AI provider configuration, partition handling, and billing currency.

Glossary

Key terms used across the product: Finding, Action Request, Conflict Guard, Idempotency Key, Realized Savings, Verification Checkpoint.

Changelog

Recent platform updates: new rules, new connectors, security hardening, and breaking changes with migration notes.