Launching today
EvidentTrail
Turn GitHub activity into audit-ready compliance evidence
4 followers
Turn GitHub activity into audit-ready compliance evidence
4 followers
Capture GitHub PR approvals, branch protection drift, and AI-assisted commits as continuous, tamper-evident evidence — mapped to SOC 2 CC8.1, ISO 27001 A.8.32, and EU AI Act requirements.
SOC 2 audits kept costing engineering teams weeks they didn't have, not because the evidence didn't exist, but because no one was collecting it continuously. Every sprint it was the same: chase PR links, take screenshots, rebuild the same spreadsheet from scratch.
Built EvidentTrail to fix that. It connects to GitHub and automatically captures PR approvals, branch protection changes, CI results, and AI-assisted commits as structured, tamper-evident evidence mapped to the controls your auditor will actually ask for.
Launching today to get it in front of real teams. The GitHub integration is solid. We added manual evidence uploads too, for the stuff that doesn't live in GitHub, signed approvals, vendor assessments, policy docs. Other integrations are on the roadmap.
Would genuinely love your feedback on three things:
Does the onboarding make sense without hand-holding?
Is the evidence quality something you'd put in front of an auditor?
What integration would unlock this for your team?
Happy to answer anything in the comments.
Thanks for checking us out 🙌