KNOWLEDGE BASE • USING THE PLATFORM
Maintained by AffirmReady Support
If you are looking for a place to upload your policies, screenshots, or other documentation, this article explains why AffirmReady does not store evidence files and how the platform keeps track of your evidence instead.
The short answer
AffirmReady does not store your evidence files by design. Your evidence stays in systems your company already owns and controls, such as SharePoint, OneDrive, or a shared drive. AffirmReady records where each piece of evidence lives, so you can find it quickly when you need it.
Why we built it this way
- Your evidence can be sensitive. Screenshots of system settings, network details, and security policies can describe how your environment is protected. Keeping that information inside your own systems means it is not copied to another outside service.
- Your company stays in control. You decide who can see your evidence, how long it is kept, and how it is backed up, using the tools and permissions you already manage.
- Evidence stays current where it is maintained. Policies and records change over time. Keeping them in one place, your own, avoids outdated copies in multiple locations.
- It reduces what you need to protect. Every place that holds copies of your security documentation is another place that needs to be secured. Keeping evidence in your own systems keeps that footprint small.
How evidence tracking works in AffirmReady
AffirmReady keeps an evidence register. For each piece of evidence, you record:
- What the document is, for example "Visitor sign-in log" or "Screenshot of MFA policy."
- A link to where it is stored in your own Microsoft 365, Google Drive, or other system.
- Who owns it, so everyone knows who keeps it current.
- When it is due for review, so it stays current before your annual affirmation.
Tips for organizing your evidence
- Create one folder for CMMC Level 1 evidence in a system your company already uses, with a subfolder for each requirement.
- Limit access to that folder to the people who need it.
- Use clear, dated file names, such as "2026-09 MFA policy screenshot."
- Review your evidence at least once a year, before your annual affirmation.
Can I paste links to my files?
Yes. You can record a link to a file or folder. The link is only useful to people who already have permission to open it in your system, so recording a link in AffirmReady does not give anyone new access to your files.
Still need help?
If you have a question about organizing or tracking your evidence, Email our support team at support@affirmready.com and include your company name and the email address on your AffirmReady account. We typically respond within one business day.