Share SOC 2 Evidence
Walk through your evidence inside Qube
Bring the evidence into the room. Walk your auditor through the relevant material, answer questions in context, and keep the working review together inside Qube.
Qube · Content reviewed
Bring the material the meeting needs
- Redacted control evidence and relevant supporting documents
- An agenda connecting each discussion to a control or request
- Approved participants and an agreed record-handling policy
From preparation to review
Before the session
Identify the requested evidence and the people authorized to review it. Prepare suitable copies in the workspace, remove unrelated personal or customer data, and agree with the auditor on evidence-delivery and recording requirements.
Inside the room
Walk through the material and the context behind it. Use the shared computer to inspect a document or explain a process, and distinguish a live demonstration from an artifact the auditor needs to retain.
After the meeting
Deliver any required evidence through the agreed channel. Retain an authorized session record only according to the selected policy. A temporary Qube workspace is not the auditor’s permanent evidence archive.
Explain the evidence where the questions happen
An auditor may need more than a screenshot. They may need to understand how a request was approved, what an event means, or how a control operates. A live walkthrough gives the relevant owner a place to answer those questions beside the supporting material.
Qube is the meeting workspace for that conversation. It does not replace your compliance system, evidence collection process, or auditor’s judgment. Keep the official request list and accepted evidence in the systems your audit requires.
Keep the review and the retained evidence distinct
Some material can be demonstrated during the session; other material must be formally delivered. Decide which is which before the review. A protected presentation does not override the auditor’s requirements or your organization’s commitments.
Files used in the cloud session, an authorized meeting recording, and the evidence delivered afterwards have different lifecycles. Document the handling decision and confirm the actual protection on the devices used to join.
Questions before the meeting
Does using Qube make us SOC 2 compliant?
No compliance outcome follows simply from using a meeting product. Your controls, implementation, evidence, and auditor’s evaluation determine the audit result. This page describes a live evidence-review workflow, not a certification.
Can the auditor retain evidence?
Agree on required deliverables and their approved delivery channel with the auditor. A live walkthrough may complement retained evidence; it should not be used to promise that no copies will exist while also meeting a request for copies.
Will all review material disappear when the meeting ends?
The temporary execution environment and any authorized retained record are different. Confirm what the team retains, who may access it, and how the retention policy applies before recording a sensitive review.
Understand the protection you will use
Qube runs the shared work in a trusted cloud session. Protection of the delivered view and audio depends on the client and policy. Check the intended devices, physical-capture risks, and authorized recording arrangements before sensitive work.
Read the protection coverage and retention policy. Destruction of the temporary workspace is separate from retention of an authorized meeting record.
Bring your workflow into Qube
Walk through the room, the shared tools, and the participant devices with us. Agree on the protection and review settings before you use it for sensitive work.
Book a demo