# Compliance Evidence Log
URL: https://docs.autociso.io/console/ciso-reports/evidence-log/
Description: The Evidence Log is the consolidated audit trail of access decisions, reviews, remediation and lifecycle events recorded in AutoCISO. Use it as source evidence when preparing for a compliance audit.

*This is the help text the console shows in the help panel on this page.*

## Evidence Collection Log

The Evidence Log is the [consolidated audit trail](https://docs.autociso.io/console/settings/audit-trail/) of access decisions, reviews, remediation and lifecycle events recorded in AutoCISO. Use it as source evidence when preparing for a compliance audit. The page loads the most recent 500 events that match your filters.

### Event Types
- **Access Detected**: [An audit found](https://docs.autociso.io/console/access/access-audit/) an access grant.
- **Review Approved** / **Review Rejected**: A reviewer approved or rejected an access grant in the [Review Queue](https://docs.autociso.io/console/access/review-queue/).
- **Review Remapped**: A reviewer [matched the account to a different employee](https://docs.autociso.io/product/access/correct-employee-match/).
- **Review Classified**: A reviewer classified an account.
- **Remediation Closed**: A remediation task was closed.
- **Lifecycle Updated**: A [joiner/mover/leaver case](https://docs.autociso.io/console/operations/lifecycle/) changed.
- **Employee Terminated**: An employee was marked as terminated.

The stat cards show **Total Events** plus the counts of **Approvals**, **Rejections** and **Terminations** among the loaded events.

### Filtering
- Pick an event type in the type dropdown (**All Types** by default).
- Set **From** and **To** dates to scope the log to an audit window (e.g., last quarter).
- Click **Clear** to reset the filters.

### Audit Use
When [preparing for an external audit](https://docs.autociso.io/console/iso/auditor-portal/), use this log to demonstrate that access reviews were completed, decisions were documented, and revocations were timely. Each row shows **Time**, **Event Type**, **Actor**, **Subject**, **Action** and **Details**. The filtered log exports with **CSV** or **PDF**.