EvidenTrail

EvidenTrail is a web app (with lightweight desktop agent) that automates audit evidence collection and keeps it continuously audit-ready for SOC 2, ISO 27001, and HIPAA. Instead of chasing screenshots and one-off exports, it pulls time-stamped evidence from common systems (Okta/Azure AD, Google Workspace/M365, AWS, GitHub, Jira, ticketing, vulnerability scanners) on a schedule and maps it to controls. It flags gaps (missing logs, disabled MFA, stale access reviews), requests attestations from control owners, and generates auditor-ready evidence packets with immutable audit trails. It’s a combination traditional + AI app: traditional connectors and workflows, plus AI to summarize evidence, draft narratives, and detect anomalies (e.g., policy changed without approval). It’s realistic for small-to-mid compliance teams that can’t afford a full GRC suite but still need credible, repeatable audit readiness.