Compliance evidence center
SOC 2 - PCI DSS - access reviews - immutable audit evidence - sensitive export approvals
Controls
1
1 ready for export
Packages
2
1 ready - 1 approvals pending
Evidence items
5
2 restricted items
Policy controls
1
1 workflow actions captured
| Control | Framework | Status | Owner | Cadence |
|---|---|---|---|---|
| CC7.2 - Audit event monitoring evidence | SOC 2 | ready | Compliance | monthly |
Package operations
prepare, approve, export, and retain evidence from seeded platform records
Evidence queue
chain-of-custody, retention, and source mappings
Audit event monitoring evidence: Audit event samples
confidentialaudit-events:sample:<tenant>:<yyyymmddhhmmss>
append_only_table - 2555 days
Evidence packages
SOC 2 and PCI package manifests with status, checksum, and restricted-item counts
| Package | Framework | Status | Items |
|---|---|---|---|
| SOC 2 May readiness package | SOC 2 | Collecting | 3 / 2 restricted |
| PCI payment evidence package | PCI DSS | Ready | 2 / 1 restricted |
Package evidence items
immutable source records and retention targets captured into each package
| Evidence item | Source | Classification | Retention |
|---|---|---|---|
| Audit event sample | Audit Events | Restricted | 2555 days |
| Privileged access review | Access Review | Confidential | 2555 days |
| Payment event ledger sample | Payment Events | Restricted | 2555 days |
| Queue health collector run | Evidence Collector Runs | Confidential | 2555 days |
Operational evidence
work queues, actions, and sensitive access events from the live backbone
| Queue item | Target | Owner | Status |
|---|---|---|---|
| ACH return review | #57941 | Lin Park | open |
Policy enforcement
SOC 2 and PCI controls now backed by tenant-scoped records
| Control | Framework | Level | Status |
|---|---|---|---|
| PII access requires reason and evidence | SOC2 | block | active |
PII access log
reason, field inventory, and evidence key captured for every reveal/export
| Customer | Access | Fields | Evidence |
|---|---|---|---|
| Marcus Reyes | reveal | ssn_last4, date_of_birth | demo/58044/evidence/pii-reveal.json |