Log in
Feature

Auditor workspace (read-only review)

Auditor workspace is a purpose-built surface for audits and diligence. It is designed for read-only review. Reviewers can see what evidence came from where, when it was captured, and what changed between review windows.

A reviewer-friendly workspace to verify source details, timestamps, and exports.

Workflow

How It Works

Evaluator-level mechanics behind this feature and how it becomes verifiable proof.

01
Read-only evidence versions with a tamper-evident
Read-only evidence versions with a tamper-evident file list
02
Audit periods for pinning versions and
Audit periods for pinning versions and locking snapshots
03
Diff reports between locked periods (status
Diff reports between locked periods (status and evidence pins)

Capabilities

At a Glance

Feature-specific context: outcomes, outputs, and where it fits.

Used For
SOC 2 • ISO 27001 • Customer diligence
Outcomes
Reduce back-and-forth by making evidence reviewable offline • Keep audit windows explicit and deterministic with locked snapshots • Give reviewers a clear trail from control coverage to evidence versions
Exports & Records
Evidence export (ZIP) • Audit period export (ZIP) • Change report (ZIP)
Technical Notes
Read-only evidence versions with a tamper-evident file list • Audit periods for pinning versions and locking snapshots • Diff reports between locked periods (status and evidence pins)
Sharing and Controls
Pair outputs with Trust Center tiers so you control what’s shared and preserve access logs.
What you can show reviewers
Artifacts reviewers recognize, plus sample previews of structure.
Plans
Included in
FoundationsContinuousSecurity OpsResilienceCommand

Integrations

Connectors turn work into evidence

Evidence capture and continuous checks keep evidence current between reviews.

Browse Integrations

FAQ

FAQ

Common questions from buyers and reviewers.

What does a reviewer actually receive?
Common outputs include: Evidence export (ZIP); Audit period export (ZIP); Change report (ZIP); Tamper-evident file list.
Where does this feature fit?
Teams use it for SOC 2, ISO 27001, Customer diligence. The goal is to reduce back-and-forth by tying work to evidence, approvals, and clear history.
What outcome should I expect?
Reduce back-and-forth by making evidence reviewable offline Keep audit windows explicit and deterministic with locked snapshots
Do you auto-share content externally?
No. Drafts and shared materials are human-reviewed. You control what's shared and what stays internal.
Next step
Want a walkthrough focused on this feature?
Bring a reviewer request. We'll map the workflow end-to-end.
No obligation. We respond within one business day. No compliance guarantees.