diff --git a/README.md b/README.md
index 6cb0aed..b7fd8bd 100644
--- a/README.md
+++ b/README.md
@@ -8,11 +8,13 @@ To accelerate the deployment of a hub-and-spoke architecture for building secure
 
 ## Architecture
 
+![Hub-and-spoke research enclave architecture diagram](/docs/architecture/Research%20Enclave%20Hub%20and%20Spoke%20diagrams.png)
+
 [Visio Diagram](/docs/architecture/Research%20Enclave%20Hub%20and%20Spoke%20diagrams.vsdx)
 
 ## Features
 
-- Optional use of customer-managed keys for encryption at rest (required for FedRAMP Moderate compliance).
+- Optional use of customer-managed keys for encryption at rest (required for FedRAMP Moderate and similar compliance requirements).
 - Optional peering to a central hub.
 - Choice between Active Directory or Entra ID for device authentication and management. Optionally, use Intune for device management with Entra ID.
 
diff --git a/docs/architecture/Research Enclave Hub and Spoke diagrams.png b/docs/architecture/Research Enclave Hub and Spoke diagrams.png
new file mode 100644
index 0000000..678bc32
Binary files /dev/null and b/docs/architecture/Research Enclave Hub and Spoke diagrams.png differ
diff --git a/docs/architecture/Research Enclave Hub and Spoke diagrams.vsdx b/docs/architecture/Research Enclave Hub and Spoke diagrams.vsdx
index befe082..f5f98dd 100644
Binary files a/docs/architecture/Research Enclave Hub and Spoke diagrams.vsdx and b/docs/architecture/Research Enclave Hub and Spoke diagrams.vsdx differ