Skip to main content
VerxiAttestation Ledger

DDocumentation · Operations manual

Get audit-ready in minutes.

Quick-start guides, integration docs, and answers to common questions.

Operations manual · Rev. 4

AQuick start · Five procedures

The five-minute start.

01

Create your account

Sign up at verxi.pages.dev/register. Free 14-day trial, no credit card.

02

Connect your cloud provider

Click "Integrations" → "Add AWS" and complete the OAuth flow. Takes ~2 minutes.

03

Review auto-mapped controls

Verxi maps your infrastructure to SOC 2 controls. Review and adjust.

04

Upload remaining evidence

Drag-and-drop policies, screenshots, and documents for non-automated controls.

05

Generate your report

Click "Generate Report" → download PDF or share link with your auditor.

BGuides · Reference manual

Reference guides.

Connecting Infrastructure

G-01
  • AWS — OAuth via IAM Identity Center. Verxi reads CloudTrail, IAM, S3, EC2, RDS, and Security Hub.
  • GCP — Service account key or Workload Identity. Reads Audit Logs, IAM, VPC Firewall Rules.
  • Azure — App registration with Reader role. Reads Activity Log, AD, Key Vault, NSG.
  • GitHub — OAuth App installation. Reads branch protection, CODEOWNERS, Actions workflows, Dependabot config.
  • Okta — API token (read-only). Reads MFA enrollment, app assignments, SSO events, password policy.

Uploading Evidence

G-02
  • Drag-and-drop files directly into the Evidence page, or use the API endpoint POST /v1/evidence.
  • Supported formats: PDF, PNG, JPG, CSV, JSON, YAML, TXT. Max file size: 50MB.
  • Tag each piece of evidence to a specific control (e.g., CC6.1 — Logical Access).
  • Evidence is automatically timestamped, versioned, and stored in encrypted object storage.
  • Bulk upload via CSV: prepare a spreadsheet with control ID, file path, and notes.

Generating Audit Reports

G-03
  • Go to Reports → "New Report" and select SOC 2 Type I or Type II.
  • Choose which trust service categories to include (Security is required, others optional).
  • Reports include: executive summary, control-by-control analysis, evidence references, and test results.
  • Export as PDF (AICPA-compliant format) or generate a shareable link for your auditor.
  • Type II reports include a continuous evidence timeline showing control operation over the review period.

Sharing with Auditors

G-04
  • Generate a time-limited share link from the Reports page (default: 30 days, configurable up to 90).
  • Auditors see a read-only view of your controls, evidence, and compliance status.
  • No auditor account required — they access via a secure link with optional password protection.
  • Share links include an audit trail: you see who accessed what and when.
  • Revoke access at any time. Expired links automatically redirect to a "request access" page.

API Reference

Programmatic access

Full REST API for programmatic access. Upload evidence, query control status, generate reports, and receive webhooks — all via API.

GET /v1/controls?status=gap&framework=soc2

CExhibits · Frequently asked

Questions, answered.

01

How long does SOC 2 compliance take with Verxi?

Most companies are audit-ready within 2-4 weeks for Type I, and 3-6 months for Type II (which requires a monitoring period). Verxi dramatically reduces the manual work in both phases.

02

Do I need a compliance consultant?

Not necessarily. Verxi includes policy templates, control guidance, and step-by-step workflows. However, we partner with vetted audit firms if you prefer guided support.

03

What if I already use Vanta or Drata?

We offer a migration path. Export your controls and evidence from your current platform, and Verxi will import and re-map them to our control framework.

04

Is there an API?

Yes. RESTful API with full documentation at verxi.pages.dev/docs. Supports evidence upload, control status queries, report generation, and webhook notifications.

05

Which SOC 2 trust service categories do you support?

All five: Security (Common Criteria), Availability, Processing Integrity, Confidentiality, and Privacy. Most companies start with Security only and add others over time.

06

Can I try before I buy?

Yes. 14-day free trial with full access to all features. No credit card required. If you need more time, just ask — we routinely extend trials.

EReady to start?

Create your free account — first evidence in five minutes.

Get started free