Track evidence for a framework
Choose the frameworks you follow, record the evidence behind each requirement, and keep it current with reviews and reminders.
1 min readUpdated
Choose your frameworks
Open Evidence in the dock and choose Choose frameworks. bynh covers SOC 2, ISO/IEC 27001:2022, PCI DSS v4.0.1, NCA ECC, SAMA CSF and PDPL. Only owners and admins can change the list.
A requirement is met when evidence mapped to it is current, or a published policy covers it.
Add evidence
Step 1: Create the item
On All evidence, add an item with a Name, a Category, an Owner and how often it’s reviewed: every month, quarter, 6 months, year or 2 years.
Step 2: Say what it proves
Fill in What it shows and Where it comes from, then pick the requirements it Counts toward.
Step 3: Attach the proof
Upload files: PDF, PNG, JPG, CSV, TXT or JSON, up to 20 MB each. Adding a file marks the item collected. Files stay private: only your team can download them.
Keep it current
| Status | Means |
|---|---|
| Current | Collected within its review cycle |
| Review due | Due within 14 days |
| Overdue | Past its review date |
| Not collected yet | Nothing attached or marked yet |
Mark collected records a fresh check. Remind emails the item’s owner. Show on trust center lists the item by name and status on your public page.
Share it with your auditor
Export for auditor downloads a CSV with every requirement, its status, the evidence and policies behind it, when each was last collected and what’s missing. Any member can export.
Was this helpful?