S
Simpleasyty
Help Center — SOC 2 Evidence Register
GETTING STARTED
IntroductionQuick start
CREATE A SCHEMA
Create a schema from a templateCreate a schema from scratch
SCHEMA TEMPLATES
Security Risk RegisterISO 27001 Document ControlSOC 2 Evidence RegisterPolicy ManagementThird-Party RiskData ClassificationApplication PortfolioControlled DocumentArchitecture Decision RecordInformation Asset RegisterBusiness Continuity RegisterGDPR Processing Activity
IMPORT
Import a JSON or YAML schema packageImport Page Properties
FIELD TYPES
Schema field typesText fieldsNumber fieldsYes / No fieldsSingle choice fieldsDate / Time fieldsEmail fieldsURL fieldsConfluence reference fieldsList fieldsField group fields
MANAGE SCHEMAS
Manage schemasIndexed fields and filtersSchema permissions
CAPTURE DATA ON PAGES
Capture metadata on a pageCapture, validate and repair metadata
CREATE REPORTS
Build a Metadata ReportConfigure report filters and viewer controls
STORAGE & PRIVACY
Data residencyStorage in ForgeRetention and deletion
COMPLIANCE
Compliance workflowsMetadata, history and revisions
ADMINISTRATION & TROUBLESHOOTING
Import and exportSchema reconciliation and processesSecurity, storage and limitsTroubleshoot schemas, filters and reports

SCHEMA TEMPLATES

SOC 2 Evidence Register

Keep audit evidence tied to a control, a collection period and the people responsible for collecting and reviewing it.

SOC 2 examinations look at service-organization controls relevant to trust services criteria. Evidence may come from many pages, people and periods. This template makes each item identifiable and reviewable, so an audit team can see what was requested, collected and accepted; it does not perform an audit.

Fields

An evidence request is only useful if the audit team can find the right material for the right period and see whether someone has reviewed it. This structure keeps that trail together.

FieldTypeWhat it captures
Control IDRequired · IndexedTextIdentifier of the audit control supported by the evidence.
Trust criteriaRequired · IndexedSingle choiceSOC 2 trust services category supported by the evidence.Choices: Security, Availability, Confidentiality, Processing integrity, Privacy
Evidence typeRequired · IndexedSingle choiceForm of the audit material being collected.Choices: Document, Screenshot, Record, Attestation
Evidence ownerRequired · IndexedConfluence userPerson responsible for collecting and supplying the evidence.
PeriodTextAudit or reporting period covered by the evidence.
Evidence statusRequired · IndexedSingle choiceStage of collection and review, from requested to accepted.Choices: Requested, Collected, Reviewed, Accepted
ReviewerConfluence userPerson who checks the collected evidence.
Last reviewedIndexedDateDate on which the audit evidence was last reviewed.