Evidence Upload Workflow

[MuhammadKhalilzadeh]

Findings: Upload stops at file selection with no guided classification or tagging, high risk of misplaced/untagged evidence.

• Implement post-upload wizard with the following prompts:
  • Assign evidence category / folder
  • Add tags (policy, risk, control mapping, audit year, etc.)
  • Specify related frameworks (ISO, SOC2, NIST, AI Governance)
  • Assign a reviewer or owner
  • Set retention or review cycle