AppsSecurity & Compliance

Audit and evidence

Evidence vault

The Autessa evidence vault seals analytics results, table rows, Drive files or JSON into write-once storage with a SHA-256 hash for every item and a signed manifest. COMPLIANCE seals are locked until their retention date so nobody can change or delete them, including Autessa, and every seal, view, verify, export and delete is recorded in the seal’s chain of custody.

Start free
Evidence seal · INC-2026-0412COMPLIANCESample
001-access-log.json
TABLE_ROWSsha256 5f0a…91c2
002-incident-query.csv
ANALYTICS_JOBsha256 b81e…07fd
003-badge-photo.jpg
DRIVE_FILEsha256 2c9d…e4a0
VERIFY ok: trueitemsChecked 3 · signature VALID · mismatches []

The problem

What problem does it solve?

An investigation, a legal hold or an audit needs records that provably have not changed since they were collected. Screenshots and exported spreadsheets prove nothing.

How it works

  1. 1

    Seal

    Give a case, ticket or incident reference and up to 200 items: ANALYTICS_JOB, TABLE_ROWS, DRIVE_FILE or INLINE_JSON. Each is read with your own access, so row and column security apply.

  2. 2

    Hash and sign

    Each file is hashed and written, then a canonical manifest is hashed and signed. Nothing is written if any item cannot be read.

  3. 3

    Verify any time

    verify re-reads every file and the manifest, re-hashes them and checks the signature. ok is true only when nothing differs.

  4. 4

    Export

    Download a zip of items/, manifest.json and manifest.sig through a short-lived link.

Every option

Evidence vault: settings and options

SettingWhat it does
COMPLIANCELocked until the retention date, 1 to 36,500 days. Can never be deleted early.
DEMOUnlocked and deletable, for trials and demos.
LimitsUp to 200 files and 4 GiB per seal; up to 1,000 row ids per table item.
Verify resultsMISSING, SIZE_CHANGED, HASH_CHANGED, MANIFEST_CHANGED, MANIFEST_MISMATCH, SIGNATURE_INVALID or SIGNATURE_CHANGED.
Chain of custodySeal, view, verify, export and delete events on every seal.

Permissions

Who can do what?

WhoWhat they can do
Company adminsUse the evidence vault.
Nobody, including AutessaChange or delete a COMPLIANCE seal before its retention date.

FOR DEVELOPERS

autessa evidencebash
autessa evidence seal --caseRef INC-2026-0412 --mode COMPLIANCE --retentionDays 2555 \
  --items '[{"type":"TABLE_ROWS","tableId":"<tableId>","rowIds":[418]}]'
autessa evidence verify --sealId <sealId>
autessa evidence list --caseRef INC-2026-0412

What to know

  • The evidence vault works from the CLI, the API and the SDK.
  • Exports download through a short-lived link from the CLI.

Read the docs: All CLI commands →

Connections

How Evidence vault connects to the rest of Autessa

Data access log →

Seal the access trail for a case.

Append-only tables →

For records that must never change from the start.

Autessa Analytics →

Seal the results of an analytics job.

Reports, policies and security questionnaires are on the Autessa Trust Center.

FAQ

Evidence vault: questions

Can a sealed record be changed later?

No. Files are written to write-once storage. COMPLIANCE seals are locked until their retention date, and verify shows any difference.

How do I prove the evidence has not changed?

Run verify. It re-reads every file and the manifest, re-hashes them, checks the signature and reports VALID with no mismatches.

Does sealing bypass row-level security?

No. Each item is read with your own access, so row and column security apply.

Get started with Evidence vault

The Autessa evidence vault seals records into write-once storage with a SHA-256 hash for every item and a signed manifest, locks COMPLIANCE seals until their retention date, and logs every view in a chain of custody.

Start free

Reports, policies and questionnaires live on the Autessa Trust Center.

100% customizable, code and all

Make Autessa Security & Compliance fully your own.

Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.

Start free and make it yours