# Evidence Vault
URL: https://docs.autociso.io/console/iso/evidence/
Description: The Evidence Vault is the central repository for the evidence that supports your ISO 27001 controls. It links collected artifacts to specific Annex A controls, making audit evidence retrieval fast and traceable.

*This is the help text the console shows in the help panel on this page.*

The Evidence Vault is the central repository for the evidence that supports your ISO 27001 controls. It links collected artifacts to specific [Annex A controls](https://docs.autociso.io/console/iso/soa/), making audit evidence retrieval fast and traceable.

### Evidence Sources
Each item shows its **Source**, and you can filter by it:
- **vision**: Evidence AutoCISO [collects automatically](https://docs.autociso.io/console/operations/evidence-agent/) from your own AutoCISO data (access records, assets, audit log) when you click **Run Collection**.
- **manual**: Files uploaded by your team (screenshots, exports, signed documents) and evidence created automatically when you close an [access review campaign](https://docs.autociso.io/console/iso/access-reviews/) or sign a [backup test](https://docs.autociso.io/console/iso/backup-tests/) or [internal audit](https://docs.autociso.io/console/iso/internal-audits/).

### Evidence Freshness
- **Fresh**: The current evidence for the control.
- **Stale**: The evidence has been superseded or is older than the recency threshold (the page shows how many controls are stale and offers **Rescan all stale**).
- **Missing**: Collection is enabled for the control but no evidence exists yet, a gap to close before the audit.

### Actions
- **Run Collection**: Collect evidence automatically for your controls.
- **Upload Evidence**: [Attach a file to a control](https://docs.autociso.io/product/iso/upload-evidence/) (PNG, JPEG, WebP, PDF, JSON or text, up to 50 MB).
- **Rescan all stale**: Refresh all stale items.
- **View**: Open an item to see its AI summary and SHA-256 hash for integrity checks, copy the hash, show the raw payload, or **Download JSON**.
- **Re-scan**: Collect fresh evidence for a single control.
- **Schedule**: Set automatic collection for a control (Disabled, Every 15 min, Every 30 min, Hourly, Nightly, Weekly).

[Only Owners and Managers](https://docs.autociso.io/getting-started/roles-and-permissions/) can run, upload or schedule collection.

### Auditor Access
Evidence is visible to external auditors through the **[Auditor Portal](https://docs.autociso.io/console/iso/auditor-portal/)**, which gives them read-only access without a platform login.