Evidence & Audit Operations

Evidence freshness

Evidence files are immutable and content-hashed. Each item shows a freshness indicator:

To replace evidence while keeping the old item in the audit trail, request recertification. Meridian creates a collection task tied to that item.

Running an internal audit

An audit cycle moves through planning, fieldwork, reporting and completion. During fieldwork, reviewers test controls, request more evidence and record a conclusion for each control. Findings are created, edited and finalized in the cycle. Before completion you can generate an evidence package for the cycle. See Audit Workflow for each step.

Working with external auditors

You invite an auditor to a specific audit cycle. Each invite grants named permissions, such as viewing controls, viewing evidence or downloading the evidence package. The auditor only sees the areas their invite unlocks. You can see whether an auditor has started, revoke an invite, or re-issue it with a new one-time code. See Auditor Portal.

Reports from an audit

• The Audit Report covers one cycle: findings, remediation and repeat findings across cycles.
• The Compliance Readiness Report is a program-level snapshot for leadership.

See Audit Reports and Scheduled Reports.

Related Meridian topics

• Programs, Controls & Evidence
• Reporting, Remediation & Trust