Frequently asked questions

EvidProof is an AI platform that audits business documents and surfaces gaps between an organization's policies/claims and the evidence that actually exists. It uses AI to compare what companies claim against real evidence — producing gap reports, risk scores, and remediation recommendations. Supports ISO 27001, PDPA, GDPR, SOC 2, and other frameworks.

EvidProof has a free tier that works instantly — including 5 document uploads per month, AI analysis, and basic report generation. Commercial usage starts at $24/month.

In internal validation against 100 real-world documents, the AI achieved 87% accuracy at identifying gaps against ISO 27001:2022. AI analysis does not replace certification by a licensed third-party auditor approved by an accreditation body.

Data is encrypted with AES-256 both in transit and at rest. Servers are hosted in AWS Singapore (ap-southeast-1) in compliance with PDPA, GDPR, and SOC 2. Users can delete data at any time, and documents are automatically purged after 30 days.

No. EvidProof does not use customer data to train AI models. Analysis uses pre-trained LLMs with ephemeral request handling — your content is not retained by the LLM provider.

Supported types: company policies (Security, HR, IT), business contracts, TOR (Terms of Reference), SOW (Statement of Work), ISO 27001 Statement of Applicability, PDPA Privacy Policy, GDPR Data Processing Agreements, SOC 2 evidence, NIST CSF assessments, audit reports, and data protection documents.

A single document takes 30-60 seconds. A full ISMS audit covering 20-30 policies takes approximately 15-20 minutes.

EvidProof reports are designed for pre-audit gap analysis and evidence preparation before a real audit by a certified auditor — not standalone certification. Reports can be exported to PDF and shared with your audit team or consultant.