Upload evidence
Attach a minimized file to the correct control requirement and audit period while preserving a reviewable evidence record.
Upload a file
- Open the control and choose its manual evidence requirement.
- Select Upload evidence and choose the file.
- Set the applicable period and confirm the upload.
- Open the resulting evidence record and verify the file and requirement.
Web uploads are limited to 25 MB. File inspection rejects executable content and unsupported file types. Use a supported document or image format rather than renaming a rejected executable.
Prepare useful evidence
Include the system, date range and decision or operating result. Remove credentials, unnecessary personal data and unrelated customer content before uploading. A screenshot without its scope or period may still need review.
Uploads are content-addressed, but each successful upload remains a distinct evidence record. Reusing a filename does not silently replace the earlier record.
Verify and export
Check the recorded hash when downloading or transferring evidence. Preserve the associated review and approval rather than treating file presence as an approval.
For automated snapshots, use evidence checks. For an auditor handoff, build an audit package.