Compliance ProofPacks in seconds

Streamlined evidence collection — without Drive, Dropbox, or email chaos

ProofRepo replaces scattered Google Drive folders, ad-hoc Dropbox links, and long email threads with a single guided flow for compliance evidence.

Auditors and third parties use ProofRepo to collect the right artifacts from clients — mapped to controls and ready for workpapers.

Companies use ProofRepo to be audit- or review-ready with clean, correctly labeled inputs, without buying a big-ticket compliance suite.

Upload evidence
Built for boutique audit firms SOC 2, ISO 27001, HIPAA, GDPR, NIST CSF Cleaner than ad-hoc Google Drives No $20k “all-in-one” suite required

Upload evidence and get a ProofPack

Use this form to send SOC 2 and related evidence. You’ll receive a confirmation email with a secure ProofPack link. During beta we’re focused on correctness and reviewer experience — payments (Stripe, etc.) will plug in later.

We use this for routing, wording, and which fields show up — not for billing.

Trust, privacy, and retention

Private by default

ProofPacks are shared via secure, unguessable links. No public indexing.

Only people you share the link with can access the ProofPack.

Storage + retention

Files are stored in Cloudflare R2 and automatically deleted after a short retention window.

If you need different retention, email [email protected].

We don’t “read your evidence”

The guided tagging uses filenames + your selections to organize what each file proves. Reviewers use the ProofPack viewer to evaluate evidence in context.

You control what you upload and who receives the ProofPack link.

For companies

Get audit- and review-ready

Upload evidence once and keep a clean ProofPack you can reuse with auditors, customers, investors, and partners.

Reduce “please resend” loops

Guided prompts + required SOC 2 tagging helps prevent wrong exports, wrong date ranges, and missing artifacts.

How ProofRepo works (today)

1) Share or open the link

An auditor, third party, or company goes to proofrepo.com. Auditors can share the link plus a short code so uploads are routed and tracked to the right engagement.

2) Guided upload

The form nudges uploaders toward the expected artifacts for the frameworks selected. No shared drives, no random screenshots in Slack.

3) ProofPack for reviewers

ProofRepo generates a structured manifest and a human-friendly viewer that groups files by what they prove and flags missing items. You can keep using your own workpapers — just link to the pack.

 Guided SOC 2 evidence collection • Built for boutique auditors and their clients • Lightweight alternative to messy shared folders • No need for a full 5-figure compliance platform • Beta pricing and Stripe billing coming soon • Ask for complimentary auditor codes at [email protected] • Guided SOC 2 evidence collection • Built for boutique auditors and their clients • Lightweight alternative to messy shared folders • No need for a full 5-figure compliance platform • Beta pricing and Stripe billing coming soon • Ask for complimentary auditor codes at [email protected]