Portal loginUse the evidence you already maintain. The Complade Audit Portal keeps ISO 27001 and CyberSecure Canada audit evidence out of email threads and reduces duplicate work.
Share existing policies, procedures and system records through controlled auditor access, an available integration or direct upload to the Complade Audit Portal. Keep evidence out of unmanaged email threads and reduce duplicate preparation.
Email can be used for questions and access coordination. Submit the evidence itself through one of the agreed methods below.
Many organizations already use a GRC tool or document library to manage their risk programme. Complade helps you show those artifacts to the audit team while reducing the need to prepare a second set of documents just to share them.
Keep using the governance, risk and compliance (GRC) platform where you manage your risk programme. Grant your assigned Complade auditor access to the relevant audit engagement and artifacts, using the permissions available in your tool.
If your policies, procedures and records are organized in SharePoint, OneDrive, Google Drive, Confluence, Notion or another repository, arrange controlled access for the audit team. Agree the relevant folders, documents and permissions before review.
With your authorization, a supported connection can retrieve selected artifacts and present them to the audit team in the Complade Audit Portal. Vanta and Maple GRC integrations are available. Other native integrations are in progress.
Upload policies, procedures and supporting records to the portal during Stage 1, the desk review. You can use Word, Excel and PDF files or an audit package exported from your GRC tool. Organize the submission against the portal evidence list.
Direct access to a document library is separate from a native integration. Confirm the sharing method, permissions and required evidence for your engagement with your auditor.
Find and add Complade as your auditor in Vanta, then assign the relevant engagement. The selected engagement and permissions determine which evidence the auditor can review. Follow Vanta’s official guide to set up access.
Official Vanta guide: adding an auditorChoose the method that fits your organization. Export your audit package and upload it to the Complade portal, give the auditor direct access to Maple GRC, or authorize the application programming interface (API) integration to transfer the required artifacts.
The following native integrations are coming soon. In the meantime, arrange direct access or upload an exported evidence package.
After scope confirmation and signing the agreement and non-disclosure agreement, review the evidence list with your audit team. Choose the sharing method that fits your documents and systems. You can combine methods where needed.
Policies and procedures describe your system. Records and other artifacts show how it operates. Match evidence to the relevant requests and check that the auditor can access it before review. Payment is due once the required evidence is available, before the Stage 1 review begins, unless other terms are agreed.
The aim is to make presenting evidence as efficient as possible. The auditor may still request clarification or additional evidence to support the audit conclusions.
A GRC subscription is optional. Every sharing method is subject to the same audit criteria. Access to a tool or a successful evidence transfer does not establish conformity or guarantee certification.
Read the full certification audit processNo. Complade does not accept audit evidence by email. Upload it to the Complade Audit Portal, arrange controlled auditor access to your existing tool or document library, or authorize an available integration. Email can be used to coordinate access and ask questions.
Yes. You can arrange controlled access to evidence in SharePoint, OneDrive, Google Drive, Confluence, Notion or another agreed repository. Confirm the required permissions and evidence with your assigned auditor. This is a direct-access option; it does not imply a native Complade integration with each service.
Yes. You can upload existing Word, Excel and PDF files or an exported audit package during Stage 1, the desk review. You can also agree controlled access to the library where you maintain them. A separate governance, risk and compliance (GRC) subscription is optional.
Vanta and Maple GRC integrations are available with client authorization. In Vanta, add Complade as your auditor and assign the relevant engagement. Maple GRC users can upload an exported audit package, grant auditor access or authorize an API integration. Drata, Sprinto, ServiceNow GRC and OneTrust integrations are in progress and coming soon.
Agree uploads, authorized access or an available integration with your audit team.
Start your free applicationExplore the audit portal