Evidence
Upload, describe and link the proof that your controls and obligations are met.
8 min read8 sectionsAll roles (some actions owners and admins only)
Evidence is the proof that your controls work and your obligations are met — audit reports, attestations, certificates, screenshots and logs. Upload the document, describe it clearly, then link it to the controls, obligations and other records it supports.
Open Evidence in the sidebar to see every evidence item you have access to.
The toolbar lets you narrow the list by organisational unit, Status, Type and Linked (All, Linked or Unlinked). Sort by orders it by Name, Status, Type, Uploaded or Size, and Group by groups rows by Status or Type. Export CSV downloads the rows currently shown.
Register columns
- Evidence ID
The register key, for example
EV-104, assigned automatically. It stays pinned while you scroll sideways.- Document
The evidence title.
- Description
What the evidence shows.
- Classification
Public or Confidential.
- Privilege
Marks legally privileged evidence. A dash means non-privileged.
- Shared
A Shared chip when the evidence is also visible to other units; hover it for the unit names.
- Status
The file's processing state — normally uploaded. It does not mean anyone has reviewed the evidence. An Archived badge means the file is in long-term storage.
- Type
The document type chosen at upload.
- Uploaded / Size
Upload date and file size.
- Linked
How many records the evidence is linked to. Click it to open the evidence page, which lists them all.
Each row has View, which opens the evidence page, and Link (propose), which opens the edit form where you add links.
Uploading creates a proposal; the evidence joins the register once an owner or admin approves it.
- 1
Click Upload Evidence
It is at the top right of the register.
- 2
Add the document
Drag it onto the drop area or click to choose it. The title is filled from the file name — edit it to something specific.
- 3
Complete the fields
See Upload fields.
- 4
Click Upload Evidence at the bottom of the dialog
The file is stored and a proposal is created.
- 5
Wait for approval
An owner or admin approves it in Proposals. If the proposal is rejected, the uploaded file is deleted.
Accepted files (4 MB maximum)
.pdf- Word
.docx- Excel
.xlsx- PowerPoint
.pptx- CSV and text
.csv,.txt- Images
.png,.jpg/.jpeg,.gif,.webp
The Upload Evidence dialog, in the order its fields appear.
- Documentrequired
The file itself.
- Titlerequired
What people see in the register and in search. Make it specific — "Q2 2026 access review sign-off", not "scan1".
- Description (Optional)
What the document proves, which process or control it relates to, and the period it covers.
- Type
Policy, Procedure, Report, Attestation, Certificate or Other. Defaults to Report.
- Classification
Confidential (default) or Public. Confidential is offered only if you hold Confidential access; without it the field shows Public.
- Privilege
Non-privileged (default) or Privileged, which is offered only if you hold Privileged access.
- Owner (Optional)
The person responsible for the evidence.
- Organisational Unit
The part of your organisation the evidence belongs to.
- Also visible to
Other units that can view and link to the evidence. Only owners and admins can set it; members see the field greyed out.
Search and the AI assistant work from what you type, not from inside the file.
The search box above the register matches what you type against each item's Evidence ID, title, type and status. It does not search descriptions or the text inside documents. Results show the title with a View button.
The AI assistant knows an evidence item by its ID, title, description and type — it does not read the uploaded file. It also sees only evidence classified Public and Non-privileged; Confidential or Privileged evidence is invisible to it.
Links connect evidence to the controls, obligations and other records it supports.
- 1
Click Link (propose) on the evidence row
Or Propose Update on the evidence page. Both open the Edit Evidence form.
- 2
Choose records in the linking pickers
Linked Controls, Linked Risks, Linked Obligations, Linked Incidents, Linked Treatment Plans and Linked Policies. Search by ID or title.
- 3
Click Submit Update (propose)
The links take effect once the proposal is approved.
Links work both ways. You can also add evidence from the other record's own edit form using its Linked Evidence picker. See the Controls guide and Obligations guide.
Click View to see one item's details, its links and the document itself.
The page shows the classification and privilege badges, then a summary card with the Evidence ID, file size, status, uploader, business unit and the units it is also visible to. Below that are Description, File Information (type, MIME type, size and status), Upload Details (who uploaded it and when) and a section for each kind of linked record.
View Document gives you a copy of the file through a private link that expires after one hour. The file downloads; it does not open in a tab. It is disabled when the record has no document attached.
Classification and privilege decide who can see an evidence item at all.
- Public
Visible to everyone who can see the evidence's organisational unit.
- Confidential
Visible only to people who hold Confidential access.
- Privileged
A separate setting: visible only to people who hold Privileged access.
Evidence shared into your unit from another one is read-only to you, and evidence can't be copied with Make your own. Access levels are granted per person in Settings.
Where else evidence can come from, and how to remove or export it.
Uploads page
Uploads offers the same evidence upload form under Evidence.
New → Evidence
The New button creates an evidence record with no document. Files chosen there are not uploaded, and the form won't submit while any are selected — use Upload Evidence to attach a file.
Export CSV
Downloads the filtered rows with every linked record, the stored file name, size, file type and who raised each item.
Owners and admins see Delete on the evidence page. After you confirm with Delete permanently, the evidence, its uploaded file and its links are removed immediately. It is not a proposal, and there is no way to restore it.