Azure · SvenAelterman · May 25, 2026 · May 20, 2026 · May 21, 2026
diff --git a/README.md b/README.md
@@ -8,11 +8,13 @@ To accelerate the deployment of a hub-and-spoke architecture for building secure
 
 ## Architecture
 
+![Hub-and-spoke research enclave architecture diagram](/docs/architecture/Research%20Enclave%20Hub%20and%20Spoke%20diagrams.png)
+
 [Visio Diagram](/docs/architecture/Research%20Enclave%20Hub%20and%20Spoke%20diagrams.vsdx)
 
 ## Features
 
-- Optional use of customer-managed keys for encryption at rest (required for FedRAMP Moderate compliance).
+- Optional use of customer-managed keys for encryption at rest (required for FedRAMP Moderate and similar compliance requirements).
 - Optional peering to a central hub.
 - Choice between Active Directory or Entra ID for device authentication and management. Optionally, use Intune for device management with Entra ID.
 

diff --git a/docs/architecture/Research Enclave Hub and Spoke diagrams.png b/docs/architecture/Research Enclave Hub and Spoke diagrams.png
diff --git a/docs/architecture/Research Enclave Hub and Spoke diagrams.vsdx b/docs/architecture/Research Enclave Hub and Spoke diagrams.vsdx