| Workforce | Attendance capture, Shift and leave policy controls, Payroll-ready export | Mobile ID events, Biometric clock events, HR records | employee_checked_in, attendance_marked, workforce_anomaly | Identity service, Policy engine, Reporting service |
| Surveillance | Camera health monitoring, Event timeline, Retention policy operations | RTSP streams, ONVIF events, Edge gateway telemetry | camera_offline, surveillance_alert_created, recording_health_changed | Device registry, Event bus, Notification service |
| Access | Door policy enforcement, Granted/denied audit logs, Zone governance | Door controller scans, Identity tokens, Role policies | door_unlocked, access_denied, access_policy_exception | Identity service, Policy engine, Reporting service |
| NetworkSearch | Asset indexing, Cross-module query, Risk finding prioritization | Endpoint telemetry, Module event stream, Device health logs | network_finding_created, risk_score_updated, remediation_task_created | Event store, Analytics database, Notification service |
| Reports | Operational summaries, Incident exports, Trend visibility | Operational database, Event store, Analytics views | report_generated, report_exported | Reporting service, Analytics database, Log storage |
| Devices | Device onboarding, Trust-state checks, Heartbeat and diagnostics | Device registry records, Protocol handshakes, Health monitor signals | device_registered, device_heartbeat, device_offline | Device registry, Policy engine, Notification service |
| Identity | Mobile identity verification, Role-scoped access context, Session trust | Mobile verification flow, User directory, Policy scopes | identity_verified, identity_trust_updated, identity_exception | Identity service, Policy engine, Event bus |