diff --git a/README.md b/README.md
index 08ee776..1fa174f 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,12 @@ Yealink T54W/T58W → HTTPS GET (?token=) → API Gateway (token authorizer) →
 - **Secrets Manager** — stores the Yealink phone admin password
 - **Custom Domain** — `doorunlock.seahaven.com` via Route 53 + ACM wildcard cert
 
+## Documentation
+
+The canonical map of Sea Haven's AWS infrastructure lives in Confluence. This project's `seahaven-door-unlock-api` stack is represented there as a Mermaid subgraph.
+
+- **[AWS Architecture Map](https://seahaven.atlassian.net/wiki/spaces/IT/pages/1540098)** (Confluence, IT space, page 1540098)
+
 ## Lockdown Profiles
 
 Two lockdown profiles are configured: