What you get
A judgement on whether each piece of evidence supports the control it is mapped to, and where your coverage has gaps.
Evidence: access-review-export-2026-05-01.csv Mapped to: A.5.18 Access rights Supports the control in part. The export shows access was reviewed on 2026-05-01, but records no decision for 14 of the 96 accounts listed. Coverage gap — A.8.16 Monitoring activities: no evidence supplied.
Illustrative extract showing the shape and depth of the output. Not captured customer work, and not a template you receive — your document is written from your own answers.
What is checked, and what is not
Checked automatically
- Returned control and evidence identifiers are checked against the set supplied before anything is written to your workspace.
- An invented control identifier is withheld, not published.
- A withheld or unreadable result never reaches your records.
Not checked: your responsibility
- Whether the evidence is genuine, current, or produced by the system it claims to describe.
- Whether a control operating on the day of the export operates today.
- Sufficiency for a specific auditor, who may reasonably want more than the clause requires.
Who it is for
Whoever gets asked to prove it.
With a free account
- Logging evidence and keeping the register.
Paid
- AI assessment of whether each piece of evidence supports its control is included in the Readiness Bundle ($899), up to 50 assessments.
Prices in US dollars, one-time, exclusive of tax. Full detail on pricing.