Evidence: uploads, links, expiry

Upload PDF, PNG, JPG, TXT, CSV, DOCX or XLSX files up to 10 MB. We check both the extension and the file's content, so renamed files are rejected. Files are stored in your workspace only and always download as attachments.

Links and written notes are evidence too (for example a link to a ticket showing an access review). Map each item to every control it supports. Set an expiry date for time-bound evidence (certificates, annual reports); you'll be reminded 30 days ahead.

Don't upload passwords, keys or personal data you don't need. Redact screenshots.