What's New in Automated Evidence Collection?

Set up your evidence collection automation once, comply with many controls. Risk Cloud’s enhanced Automated Evidence Collection (AEC) experience is available to Controls Compliance Solution customers. These updates empower Compliance and Risk teams to streamline evidence collection, reduce manual effort, and minimize audit fatigue.

To enable AEC, please contact your LogicGate Account Team.

Article Overview

This article highlights the latest enhancements AEC within Risk Cloud, including expanded evidence sources integration, centralized AEC management pages, flexible AEC configurations, and automated failure alerts. These updates simplify evidence management and reduce manual effort across your compliance program.

What's New in AEC?

1. Expanded and Flexible Evidence Source Integrations
Risk Cloud now supports a broader range of evidence sources for AEC. We introduced File Storage integrations (e.g., Google Drive, SharePoint, OneDrive, Box, Dropbox) recently, enabling teams to pull policy documents or any evidence files directly from your cloud repositories.

Additional evidence sources we support include:

• HRIS (e.g., Workday, Paylocity, Deel) and Ticketing Systems (e.g., Jira, ServiceNow, Zendesk)

• Risk Cloud Table Reports to generate evidence using data available in Risk Cloud

• Custom Endpoints to connect any API-accessible system using token-based authentication

Learn more in Setting up File Storage Sources, Connecting Out-of-the-box Sources, or Using Custom Endpoints.

2. Centralized AEC Management Pages
We’ve introduced two new pages for AEC management under the Compliance menu to help teams streamline AEC setup and oversight:

• Evidence Sources Page: Manage all evidence systems -- easily enable/disable and configure sources across your organization.

• Evidence Automations Page: Manage all AEC automations across your organization -- easily filter, monitor automation status, edit configurations, run automations, and access collected evidence—all in one place.

Learn more in Manage Automated Evidence Collections.

3. Integrated Workflow Setup with Flexible Configurations
AEC is now built directly into your workflows, allowing automation to happen where your controls live. Builders can enable AEC within the control workflow and define default mappings to evidence workflows. End users can then configure the evidence source, collection cadence (one-time or recurring), and evidence file destination—all aligned with your program’s structure.

Learn more in Enable AEC in Workflow and Create and Configure AEC Automations.

4. Weekly Failure Notification for AEC Owners
To ensure evidence is always collected as expected, Risk Cloud allows you to enable and configure weekly failure notifications to the creator of any AEC automation. The alert summarizes failed jobs and source issues, common root causes, and remediation options. 

Learn more in AEC Failure Notifications.

Looking Ahead

We’re continuing to expand AEC with broader evidence source coverage—including upcoming support for Cloud Infrastructure, IAM, and Vulnerability Management systems—alongside enhancements to existing HRIS, Ticketing and custom endpoints integrations. We’re also exploring a centralized Evidence Repository Page for managing all evidence files, wether collected manually or via AEC, and laying the groundwork for Continuous Controls Monitoring (CCM) via automatic controls testing, which will provide ongoing control testing insights using evidence collected on Risk Cloud.