Evidence Center
The Evidence Center is a centralized repository for storing, organizing, and managing all compliance evidence required for SOC 2. It provides a single location where users can upload supporting documents, view mapped controls, and record exceptions when evidence cannot be provided.
This module helps maintain audit readiness by ensuring that all evidence is organized, accessible, and correctly mapped to the respective controls.
“The Evidence Center contains 57 required evidence checks for SOC 2 compliance.”
1. Accessing the Evidence Center
To open the Evidence Center:
Log in to Socify.
In the left navigation menu, under Compliance, click Evidence Center.
The main Evidence Center dashboard will appear with a list of all required evidence items.
2. Evidence Center Dashboard Overview
The dashboard displays all evidence items in a structured table format. Each row represents a specific evidence requirement and shows:
2.1 Sr. No.
Sequential numbering for easy reference.
2.2 Title
Name of the evidence item (e.g., Signed Code of Conduct Document of Employees, Backup Policy).
Clicking the title displays additional information about that evidence item.
2.3 Mapped Control
Shows the associated SOC 2 or framework control(s), such as:
CC1.1
CC9.2 These help auditors understand why each evidence item is required.
2.4 Tag
Evidence categories are color-coded for easy identification, such as:
HR
HR Mandatory
Governance
IT Infra
2.5 Mark as Exception
If the required evidence is not available, users can select Add Exception and provide justification.
2.6 Template
Provides:
A download icon to download sample or reference templates
A view icon for evidence management
These help users prepare properly formatted evidence files.
3. Evidence Filters
At the top of the screen, filter buttons allow you to refine visible evidence items:
All
Cloud IT
Facilities
Governance
HR
HR Mandatory
IT Infra
These filters streamline navigation and help users focus on category-specific evidence requirements.
4. Uploading Evidence
To upload evidence for any item in the table:
Click the upload icon (📄) in the Template column.
The Upload Evidence pop-up window appears.
Upload Evidence Pop-up includes:
4.1 Evidence Name
Displayed at the top to confirm the item you are uploading for.
4.2 Check Name & Mapped Controls
Indicates:
The specific evidence requirement
Associated SOC 2 controls
Example: Check: Signed Code of Conduct Document of Employees Mapped Controls: CC1.1
4.3 Evidence Details
A text field where users can describe the uploaded evidence or provide context.
4.4 File Upload Area
Users may:
Click to browse files
Drag and drop documents
Accepted formats include PDFs, images, text files, and other standard document formats.
4.5 Action Buttons
Upload — Saves the evidence
Cancel — Exits the window without changes
5. Adding an Exception
If evidence cannot be uploaded, users may create an exception.
Steps to Add an Exception:
Click Add Exception for the required evidence row.
The Exception pop-up opens with the following fields:
5.1 Evidence Item Dropdown
Pre-selected with the evidence name.
5.2 Exception Details
A required text box where users explain:
Why the evidence cannot be provided
Compensating controls (if any)
Additional comments
5.3 Optional File Upload
Allows attaching supporting documents related to the exception.
5.4 Action Buttons
Upload — Saves the exception record
Cancel — Closes the pop-up
6. Template Access
Each evidence item includes template options:
Download (📄) — Downloads the template file
View (👁️) — Opens the template for preview
Templates help ensure the evidence meets compliance and audit standards.
7. Purpose and Benefits of the Evidence Center
The Evidence Center supports structured compliance management by:
Centralizing all evidence in one location
Ensuring each document is mapped to the correct control
Enabling exception tracking when evidence cannot be provided
Providing templates for consistent documentation
Enhancing audit readiness with organized evidence sets
Reducing manual effort through category-based filtering and quick uploads
Examples of evidence include:
Policies and procedures
Signed employee documents
Third-party audit reports
System configuration reports
Training logs
Contracts and certificates
8. Summary
The Evidence Center is a core component of Socify’s compliance ecosystem, enabling organizations to maintain accurate, complete, and audit-ready evidence documentation. With easy uploads, exception logging, template access, and structured control mapping, users can efficiently manage all compliance requirements from a single interface.
Last updated