About
Evidence is where you collect proof that a requirement is being met: documents, links and notes, collected once or on a repeating schedule. Each piece of evidence is linked to the framework objectives (and, if you like, controls) it supports, so an auditor can follow the chain from requirement to proof.
You can review everything in a list, a Kanban board or a calendar, create evidence one at a time or in bulk from a CSV file, and keep proof current with repeating collection schedules.
Open Evidence
In the sidebar, under your framework section, click Evidence. It sits between Plan of Action and Audits.
- With All Frameworks selected, the page shows evidence for every framework.
- With one framework selected, the page shows only the evidence linked to that framework.
You can also reach evidence from the Evidence tab of an objective, from To do › Evidence, or by searching in LaunchPad.
Evidence items and evidence requests
Evidence has two levels, and the page uses both:
- An evidence item (for example EV-4) is what must be collected.
- An evidence request (for example EV-4-1, EV-4-2) is one collection of that item. Each request has its own assignee, due date, status, links, documents and notes.
The list shows one row per evidence item. The Kanban board and the calendar show one card per evidence request.
Every request has one of these statuses: Not Started, In Progress, Review, Completed or Not Applicable.
Read the evidence list
The list is the default view. Along the top you have the title count (for example "Showing 50 evidence items"), a search box, Filter, Display, Export, Copilot and Create evidence.
Each row shows these columns:
- ID: the evidence number, for example EV-4.
- Title: a clock icon marks recurring evidence, and a sparkle icon marks evidence with Copilot analysis turned on.
- Status: one pill for each status among the item's requests, with a count, for example In Progress (1) and Completed (1).
- Due On: the date, plus a note such as "Evidence due in 7 days", "Evidence due today" or "N days overdue." When an item has several overdue or upcoming requests, summary pills such as Overdue (2) or Upcoming (1) appear instead. An empty cell shows "—".
- Owner and Assignees.
- Objectives: the objective codes the item supports.
- Comments and Controls: hidden until you turn them on in the Display menu.
- Actions: an icon to upload documents and an icon to delete the evidence.
Click ID, Title, Due On, Owner or Assignees in the header row to sort. The list loads 50 items at a time as you scroll. Click a title to open the evidence item in a side panel. Hold Cmd, Ctrl or Shift while you click to open it as a full page instead, with a Back to evidence link at the top.
Search and filter
Type in Search evidence by title to find an item by its title. Click Filter to narrow the list by:
- Owner
- Assigned to
- Filter by status: Not Started, In Progress, Review, Completed or Not Applicable
- Filter by evidence: Manual or Automatic
- Filter by program: the framework
- Control set
- Due Date: use Due from and Due through to set a date range
Each filter you apply appears as a chip above the list. When a single framework is selected, the program chip is fixed to that framework.
Switch between list, Kanban and calendar
Click Display, then choose List, Kanban or Calendar under View. Under Columns, use the switches to show or hide columns in the list. Reset to default returns to the list with the default columns. The view you choose is remembered until you close the browser session.
In the Kanban view there is one column for each status. Each card shows the request's code and title, a status drop-down, its due date and its assignee.
- Drag a card to another column, or use the status drop-down, to change its status.
- Open a card's menu to choose Archive request (completed requests only) or Delete request.
The calendar places each request on its due date, coloured by status. Click a request to open its evidence item.
If a view has more requests than it can load, a message tells you how many are showing and suggests refining the filters.
Look inside an evidence item
Click a title in the list to open the item. The top of the panel shows its code and title, Prev and Next buttons to move between items, and a Copilot menu.
Below the title you can set or read these fields:
- Owner
- Collection type: either "Ad-hoc / One off collection" or "Recurring / Scheduled collection", with the start date and how often it repeats.
- Description: up to 2000 characters.
- Copilot analysis: shows whether Copilot automatically analyzes files uploaded to this evidence.
Tabs along the item include:
- Requests: the item's requests, in two sub-tabs. Active lists current requests and Scheduled lists future requests that were created ahead of time.
- Mappings: the objectives, questions and controls the evidence is linked to.
- Documents: all documents collected for this evidence.
- Comments
- Activity
- Watchers
On the Requests tab, each request row shows its ID (for example EV-5-1), who it is assigned to, its due date, status, links, documents and notes, plus icons to upload documents and delete the request. Use Search requests with ID to find a request.
Create evidence
- On the Evidence page, click Create evidence › Manual evidence. A panel opens above the list.
- Type a name in Name the evidence. This is required. Under Add details... you can add a description of up to 2000 characters.
- Use the buttons under the text to fill in the rest:
- Owner and Assignee.
- Schedule: choose Perform once and set Collect this evidence by to a due date, or choose Set repeating schedule.
- Objectives: the objectives this evidence supports. When one framework is selected you must pick at least one objective for it.
- Controls: the controls this evidence supports.
- Click Save, or press Cmd/Ctrl + Enter. A message confirms "Evidence successfully added."
To close the panel without saving, click Cancel or press Esc.
Create many evidence items from a CSV file
- Click Create evidence › From a CSV file.
- In the Import evidence from a file panel, work through the three steps: Upload File, Map Fields and Import.
- In Upload File, choose your CSV file and its delimiter, Comma or Pipe.
- Click Validate to check the file before you import it.
Upload documents
You can upload from the list or from an opened evidence item.
From the list
- Click the upload icon at the end of the evidence row, or drag files onto the row.
- In the Upload documents dialog, choose where the files go: Create a new evidence request and upload to it, or Upload to an existing evidence request and pick one of the incomplete requests.
- When the upload finishes, choose the request's status. It is set to Completed to start with. Click Update to save.
From an opened evidence item
- Open the Requests tab and click the upload icon on the request's row.
- Choose My Device (drag files in or browse) or Google Drive.
You can also drop files anywhere on an opened evidence item, then choose where they go in the Upload documents dialog.
These file types are accepted: bmp, csv, doc, docx, jpeg, jfif, jpg, pdf, png, txt, xls, xlsx and zip.
Add a link to a request
- Open the evidence item and go to the Requests tab.
- In the request's Links column, click Add.
- Enter a Name and the Link, which starts with https://, then click Add link.
To remove a link, click the bin icon next to it.
View, replace or remove a document
- On the Requests tab, click the documents button on the request, for example "1 document".
- In the table of documents you can preview or download a file, replace it with Update Document, or delete it.
Once a request is Completed, its documents are read-only.
Add a request and update its details
- On the Requests tab, click Request to add another request to the evidence item.
- On a request row, change Assigned to, Due date or Status directly in the row. Each change shows a confirmation message.
- Click the Notes cell (Add notes when empty) to write a note on the request.
Make evidence repeat
Evidence is collected in cycles, so a repeating schedule keeps proof current without you creating each request by hand.
- Open the evidence item and click Collection type.
- In Configure Evidence Collection Schedule, set the start date and how often it repeats.
New requests then appear on the Scheduled sub-tab ahead of time and move to Active as they come due.
To stop a repeating schedule, remove it from the evidence item. You then choose between Disable future evidence requests, which keeps the requests that already exist, and Also delete incomplete requests.
Start a new collection cycle now
- In the list, tick the evidence items you want to refresh.
- Click Refresh evidence in the bar that appears.
- Set the due date for the new requests. You can also choose a new assignee and choose to notify owners and assignees.
One new request is created for each selected item. Unless you pick someone else, it is assigned to the assignee of the most recent request, or to the owner if there is none.
Link evidence to objectives and controls
- Open the evidence item and click the Mappings tab.
- Under Framework Objectives, Questions or Controls, add or remove a link.
Links made from an objective's own page appear on the evidence item as inherited, and you can't remove them there.
Automatic evidence
Some evidence is collected for you by an integration. On an evidence item it appears as the integration's compliance report instead of a table of requests. On an objective, this evidence is listed under Automatic system monitors, apart from Manual evidence.
Update many evidence items at once
Tick the boxes next to the items you want, or tick the box in the header row to select the whole list. A bar appears with these actions:
- Assign
- Update owner
- Refresh evidence
- Update schedule
- Enable Copilot analysis
- Update due date
- Delete
With Update due date you enter a New due date and choose which requests it applies to: all incomplete requests, only those with no due date, or only overdue ones.
Export evidence
Click Export, then Export again in the confirmation. A file named evidence.csv downloads with the evidence that matches your current filters and search.
Delete evidence
Click the bin icon on the evidence row. In Confirm evidence deletion?, for recurring evidence choose Future Requests, which keeps what you've already collected, or All Requests. For other evidence choose Yes or No. On the Kanban board you delete or archive one request at a time from the card's menu.