Evidence
Tamper-evident ledger with verification CLI
Spot Suite Apps
Control Ledger Spot Suite app
Microsoft control-evidence automation for NIS2, DORA, and ISO 27001.
Turns your Microsoft 365 and Azure telemetry into auditor-ready evidence packs. Coexists with the GRC you already own; replaces the screenshots and spreadsheet chasing.
Evidence story
Every product page points to the proof a buyer or auditor expects before rollout.
Evidence
Tamper-evident ledger with verification CLI
Evidence
Per-control trace from artefact back to source query
What you get
No shelfware modules, no bundled mystery fees.
Scheduled read-only collectors: Microsoft Graph, Entra, Intune, Defender for Cloud, Azure Policy, Azure Activity Log
Pre-mapped control libraries: NIS2, DORA, ISO 27001:2022, CIS v8
Exception register with owner, expiry, and reason of record
Monthly control-drift digest: what failed, what changed, who owns it
SHA-256 append-only ledger with auditor read-only role and scoped exports
Evidence packs by framework, business unit, or audit period
Also in Spot Suite
xEvolve Secure file exchange with a chain of custody auditors accept.
Encrypted workspaces, signed deliveries, per-workspace retention, and a tamper-evident log of every byte. The delivery layer the rest of Spot Suite writes evidence into.
2-month trial
Access Fabric The missing operator UI on top of Entra access reviews and lifecycle workflows.
Works with Entra, does not replace it. Packages Entra reviews, entitlement management, and lifecycle workflows into auditable business workflows so JML and guest cleanup stop running through spreadsheets.
2-month trial
Guardrail Ledger The weekly operating system for Azure guardrails, exceptions, and evidence.
What drifted, who approved it, which control is now at risk. Continuous landing-zone drift, policy and RBAC change tracking, exception governance, and packaged monthly evidence for auditors and customers.
2-month trial