Evidence

Evidence proves a control works: a screenshot, an export, a configuration snapshot, a signed policy or a record pulled from a connected system.

Ways to add evidence

• Upload files one at a time or in bulk with drag and drop.
• Collect automatically from connectors on a schedule.
• Request it from a colleague with an evidence request and due date.
• Generate requests from documents with Document Intelligence.

Linking

Link each item to the controls and requirements it supports. Uploaded evidence is matched to likely controls automatically; confirm or change the suggestion.

Freshness

Every item has a collection date and a refresh cadence. When it goes stale the control's readiness drops and the owner gets a task. See Evidence freshness.

Sample size

For tested controls, record the sample size the requirement needs so testing matches what your auditor expects.