Audit Evidence Hub

Audit Evidence Hub Audit Evidence Hub links requirements, controls, tests and evidence across standards: a control such as "recertify access rights quarterly" is mapped to ISO/IEC 27001 A.5.15, SOC 2 CC6.2, NIS2 and GDPR Art. 32, tested once and then covers each of those requirements. Built for ISMS, compliance and quality managers and internal auditors. Highlights: • Starter catalog with 54 requirements and 21 controls for ISO/IEC 27001, SOC 2, GDPR, NIS2 and ISO 9001 (own short paraphrases, no standard texts), extendable with your own catalogs • Mapping matrix control ↔ requirement with mapping factor and a list of unmapped requirements • Audit programs (internal, external, readiness, supplier) from 6 templates with standards, period, lead and scope; phases planning, fieldwork, reporting, closed • Control tests (design or operating effectiveness) with a sample-size suggestion by frequency, exceptions and a suggested conclusion; a second person confirms the result • Coverage per standard (covered, partial, evidence missing, failed, untested, gap) and a readiness metric with the formula shown • Request, submit and review evidence with the four-eyes principle – with suggested validity, expiry warning, photos and files AES-256 encrypted with SHA-256 checksum • Findings (major NC, minor NC, observation, opportunity for improvement) with root cause, due dates, escalation and time-limited risk acceptance • Corrective actions with effectiveness check by a second person; local reminders for due dates • Versioned audit report: submitting freezes the state with SHA-256, a second person issues it by PIN or review request package; export as PDF and CSV with manifest • Roles Owner, Manager, Contributor and Viewer, global search for references like "A.5.15" and an audit log with hash chain Privacy: your data stays on your device. No account, no server, no tracking. Collaboration works through encrypted exchange packages. Note: sample size, conclusion, due dates and readiness are suggestions and metrics; the audit opinion is written by a person. The app is not a certification. Free: 1 workspace with 1 active audit program; reading, export, backup, deletion and receiving exchange packages are always free. The monthly Premium subscription unlocks unlimited active programs, up to 5 workspaces and program handover. It renews automatically each month unless canceled at least 24 hours before the end of the period and can be canceled anytime in your store account settings. Privacy policy: https://tonke.de/data-protection-en.html