AboutWhat's newContact & demo
Evidence & Audit ReadinessAvailable now

Evidence that arrives on time, reviewed.

Ask the right person for the right evidence with a due date and an independent reviewer. Then let one reminder engine nudge, escalate and follow up across every obligation in the platform.

Illustration with sample data

Overview

What Evidence Requests & Reminders does

An evidence request is a governed obligation. It has an owner, a reviewer, due dates and a linked record such as a control, risk or vendor. The owner gets a task, uploads to the Evidence Library and submits. The reviewer accepts it, requests changes or rejects it, and neither the owner nor the submitter can review their own submission. Accepted evidence is linked to the record and its controls. Changes requested open a new follow-up task, so a finished task is never confused with accepted evidence.

Behind every due date in RiskVantis is one reminder and escalation engine. Policies per organisation and obligation set reminders before, on and after the due date, overdue stages that escalate to roles or personas, optional follow-up tasks and fallback recipients. Each run works out the one reminder that applies today from the record's current due date and owner. A reassignment or completion never leaves a stale reminder, and an outage never sends a backlog.

Open monthly planner on a desk
Capabilities

Key capabilities

01

Governed requests

Owner, reviewer, due date and linked record on every request.

02

Independent review

Owners and submitters never review their own submissions.

03

Follow-up tasks

Changes requested open a new task, and completion is tracked separately from acceptance.

04

One reminder engine

Before, on and after due dates across risks, findings, controls, exceptions and more.

05

Escalation stages

Overdue stages to roles and personas, with fallback recipients.

06

Digest-friendly

Routine reminders can be grouped into email digests; actions never are.

Benefits

The business case.

Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Evidence Requests & Reminders changes for your programme.

Potential savings
>75%

Less evidence chasing

Requests, reminders and escalations run themselves; people only submit and review.

Achieving compliance
Segregation of duties

Independent acceptance

Evidence is accepted by someone other than the person who provided it.

Streamlined processes
No stale reminders

Always current

Reminders follow the record's live due date and owner.

Visibility & decision-making
Overdue surfaced

Escalation by design

Late obligations reach the right people automatically.

Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.

How it works

From setup to outcome.

Request

Name the owner, reviewer, due date and linked record.

Submit

The owner uploads evidence and submits.

Review

An independent reviewer accepts, requests changes or rejects.

Remind and escalate

The engine nudges and escalates until it is done.

Framework alignment

Supports your obligations.

Evidence Requests & Reminders contributes evidence and coverage to these frameworks and regulations.

SOC 2 Type IIISO/IEC 27001:2022 (7.5, 9.1)PCI DSS v4.0.1 (12.4)ITGC

All supported frameworks

FAQ

Common questions.

Can the person who uploaded evidence accept it?

No. The owner and the submitter never review their own submission.

Will people get a flood of reminders after downtime?

No. Each run sends only the one reminder that applies today, based on the record's current state.

Can reminders escalate to managers?

Yes. Overdue stages can notify roles and personas of the record's organisation, and can optionally open a follow-up task.

See Evidence Requests & Reminders in action.

Book a 30-minute walkthrough tailored to your frameworks, vendors and team.