Dashboard
Get started with ProofFlow
2/3FAIL — Not audit-ready
You will likely fail an audit. 1 control has no evidence.
2 steps remaining · ~10 min to fix
Fix this to pass your audit
Collect AWS monitoring evidence(SOC2 CC7.1)
No evidence — will cause audit failure
Re-run run org access review(SOC2 CC6.1)
Evidence is 226d old — may fail audit
Compliance Coverage
Next Actions
Covered (0)
Valid evidence on file
None yet
Stale (4)
Out of date — may fail audit
SOC2 CC6.1
Logical access controls
Proves that access to systems is restricted to authorized users.
Evidence exists but is older than the freshness requirement. Last collected 226d ago (required every 30 days).
What would fix this?
- Run a GitHub organization access review
- Verify that admin access is limited to authorized users
- Export and store evidence
SOC2 CC6.2
User access review
Proves that user access is reviewed regularly.
Evidence exists but is older than the freshness requirement. Last collected 226d ago (required every 30 days).
What would fix this?
- Run a GitHub organization access review
- Review the member list and admin roles
- Export evidence pack for audit
SOC2 CC6.3
Role-based access
Proves that roles are assigned appropriately based on job function.
Evidence exists but is older than the freshness requirement. Last collected 226d ago (required every 30 days).
What would fix this?
- Run a GitHub organization access review
- Confirm roles match job responsibilities
- Address any risk findings
SOC2 CC8.1
Change management
Proves that changes go through a controlled review and approval process.
Evidence exists but is older than the freshness requirement. Last collected 226d ago (required every 90 days).
What would fix this?
- Run a GitHub organization access review (includes PR data)
- Verify pull requests have reviewers assigned
- Export evidence pack for audit
Missing (1)
Will cause audit failure
SOC2 CC7.1
Monitoring
Proves that system activity is being monitored for anomalies.
No evidence has been collected for this control yet.
Needs: Monitoring or audit log evidence showing system activity is being captured and reviewed.
What would fix this?
- Connect AWS and collect CloudTrail evidence
- Verify CloudTrail is enabled and logging
- Ensure multi-region logging if applicable
GitHub Access Review Evidence
Latest Access Review
GitHub Account
Organization Access (0)
No organizations found for this GitHub account.
Show raw JSON
{
"orgs": [],
"user": {
"id": 57604545,
"bio": null,
"url": "https://api.github.com/users/matt257",
"blog": "",
"name": "matt",
"type": "User",
"email": null,
"login": "matt257",
"company": null,
"node_id": "MDQ6VXNlcjU3NjA0NTQ1",
"hireable": null,
"html_url": "https://github.com/matt257",
"location": null,
"followers": 0,
"following": 7,
"gists_url": "https://api.github.com/users/matt257/gists{/gist_id}",
"repos_url": "https://api.github.com/users/matt257/repos",
"avatar_url": "https://avatars.githubusercontent.com/u/57604545?v=4",
"created_at": "2019-11-10T23:17:21Z",
"events_url": "https://api.github.com/users/matt257/events{/privacy}",
"site_admin": false,
"updated_at": "2025-07-08T13:31:49Z",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/matt257/starred{/owner}{/repo}",
"public_gists": 0,
"public_repos": 8,
"followers_url": "https://api.github.com/users/matt257/followers",
"following_url": "https://api.github.com/users/matt257/following{/other_user}",
"user_view_type": "public",
"twitter_username": null,
"organizations_url": "https://api.github.com/users/matt257/orgs",
"subscriptions_url": "https://api.github.com/users/matt257/subscriptions",
"notification_email": null,
"received_events_url": "https://api.github.com/users/matt257/received_events"
},
"collectorVersion": 2
}Organization Access Review
Supports: SOC2 CC6.1, SOC2 CC6.2, SOC2 CC6.3, SOC2 CC8.1
Recurring evidence collection is a Pro feature.
Upgrade to keep controls fresh automatically with scheduled reviews.
Upgrade to ProLatest Org Member Inventory
No organizations found.
Show raw JSON
{
"orgs": [],
"collectorVersion": 4
}Collection History
AWS Monitoring (CC7.1)
Connect AWS to automatically verify CloudTrail is enabled and satisfy CC7.1 (Monitoring).
Auditor Sharing
Auditor sharing and PDF reports are Pro features.
Upgrade to generate PDF audit reports and send auditors a secure read-only view.
Upgrade to ProNotifications
Email notifications are a Pro feature.
Upgrade to get alerted when controls go stale or evidence is auto-refreshed.
Upgrade to Pro