EvidentTrail

EvidentTrail is a compliance evidence capture tool that automatically extracts GitHub pull request approvals, branch protection changes, CI results, and AI oversight metadata into tamper-evident packs for audits. It serves engineering, security, and IT teams in companies preparing for SOC 2, ISO 27001, and EU AI Act compliance. The tool is positioned as a read-only GitHub App that requires no configuration or workflow changes, providing continuous evidence capture and exportable packs with SHA-256 checksums.

Key features

• Captures PR approvals and reviewer identity
• Detects branch protection drift with severity
• Records CI check results per pull request
• Documents exception records with justification
• Captures AI oversight metadata for Copilot
• Manual evidence upload with checksum verification
• Exports evidence packs in multiple formats
• SHA-256 tamper-evident checksums on packs
• Read-only access, no source code stored
• Setup in under 10 minutes