Control evidence

Evidence collected directly from source systems and mapped to each Trust Services Criterion. Auditors can browse, filter, and pull evidence here instead of a shared drive or evidence-request emails.