Stop chasing expired compliance documents.
Track SOC 2 reports, ISO 27001 certificates, penetration tests, business continuity plans and disaster recovery tests with clear Valid, Expiring, Expired and Missing statuses.
Evidence Library
418 documents · 23 missing · 11 expiring within 60 days
- Expires 30 Nov 2026Valid
SOC 2 Type II
Amazon Web Services
- Expires 21 Mar 2027Valid
ISO 27001
Microsoft Ireland
- Expires 14 Sep 2026Expiring
Penetration Test
Stripe Payments Europe
- Expired 2 Jun 2026Expired
Business Continuity Plan
Snowflake Netherlands
- Requested 4 Aug 2026Missing
Disaster Recovery Test
Amazon Web Services
Capabilities
What you get
Automated evidence requests
Request documents from vendors and track responses.
Expiry tracking
Early warnings before a certificate or report lapses.
Document extraction
AI can extract validity dates, scope and auditor for human confirmation.
Connected records
Evidence links to providers, services, risks and Register fields.
Review queue
New submissions land in a queue for compliance review.
Coverage reporting
See evidence coverage by provider and criticality.
Evidence supports the Register.
Regulatory values reference the document they came from, so a reviewer can open the source in one click.
- Every field links to its supporting document
- Change history retained per field
- Missing evidence is visible before reporting
- Export the trail for auditors
Register field · lineage
Traceable- Field
- Data Location
- Value
- Germany
- Source
- Microsoft Azure Production Service
- Evidence
- Microsoft DPA
- Last Updated
- 12 July 2026
- Updated By
- Sarah Martin
Workflow
How the workflow runs
Get your ICT third-party risk under control.
See how one platform connects your ICT providers, assessments, evidence, contracts, risks and DORA Register.