Documentation

Auditrail helps you track evidence for compliance controls across one or more security frameworks. It organizes your evidence collection and provides a clear view of what's complete, what's missing, and what needs attention.

The platform is organized around Controls and Evidence. Each control represents a requirement from your security framework. Evidence items are the documents, files, or notes that demonstrate compliance with those controls.

Your dashboard shows the overall status: how many controls are Complete, Partial, or still Missing evidence. This helps you focus on what needs attention next.

Auditrail currently supports the following compliance and security frameworks:

Each framework includes its controls pre-loaded in the system. You can select which frameworks to use for your organization and map evidence across multiple frameworks simultaneously.

Here are tips for effective evidence management:

• Be specific: Use clear, descriptive titles for evidence. Include dates, version numbers, or other context that makes it easy to understand what the evidence shows.
• Keep it current: Update evidence when policies, procedures, or configurations change. Old evidence may not demonstrate current compliance.
• Link appropriately: Connect evidence to all relevant controls, but don't over-link. Each control should have evidence that directly demonstrates compliance.
• Use text notes wisely: Text evidence is great for quick notes, explanations, or references. For formal documents, upload files instead.
• Organize by framework: If you use multiple frameworks, filter by framework to focus on one set of controls at a time.

Auditrail accepts a wide range of file types commonly used in compliance documentation:

All files are validated by MIME type to prevent security issues. Executables and HTML files are not permitted.

Exports create a snapshot of your audit state at a specific point in time. This is useful for:

• Sharing your compliance status with auditors or stakeholders
• Creating historical records of your audit progress
• Generating reports for compliance reviews

When you create an export, you can choose to export a specific framework or all frameworks. The export includes all evidence linked to the selected controls, along with the current status of each control.

Exports run in the background. You can track their status on the Exports page. When an export is complete, you can download it as a file to share or archive.

Auditrail is designed for teams. Multiple team members can collaborate on evidence collection and control mapping within your organization.