Evidence Vault

This is the help text the console shows in the help panel on this page.

The Evidence Vault is the central repository for the evidence that supports your ISO 27001 controls. It links collected artifacts to specific Annex A controls, making audit evidence retrieval fast and traceable.

Evidence Sources

Each item shows its Source, and you can filter by it:

• vision: Evidence AutoCISO collects automatically from your own AutoCISO data (access records, assets, audit log) when you click Run Collection.
• manual: Files uploaded by your team (screenshots, exports, signed documents) and evidence created automatically when you close an access review campaign or sign a backup test or internal audit.

Evidence Freshness

• Fresh: The current evidence for the control.
• Stale: The evidence has been superseded or is older than the recency threshold (the page shows how many controls are stale and offers Rescan all stale).
• Missing: Collection is enabled for the control but no evidence exists yet, a gap to close before the audit.

Actions

• Run Collection: Collect evidence automatically for your controls.
• Upload Evidence: Attach a file to a control (PNG, JPEG, WebP, PDF, JSON or text, up to 50 MB).
• Rescan all stale: Refresh all stale items.
• View: Open an item to see its AI summary and SHA-256 hash for integrity checks, copy the hash, show the raw payload, or Download JSON.
• Re-scan: Collect fresh evidence for a single control.
• Schedule: Set automatic collection for a control (Disabled, Every 15 min, Every 30 min, Hourly, Nightly, Weekly).

Only Owners and Managers can run, upload or schedule collection.

Auditor Access

Evidence is visible to external auditors through the Auditor Portal, which gives them read-only access without a platform login.