EU evidence automation · NIS2 · DORA · ISO 27001

Stop assembling audit evidence from screenshots.

Control Ledger reads your Microsoft tenant, maps the signal to the control, and prepares an evidence pack you can review before sharing with auditors. No spreadsheets. No quarterly fire drills.

View Control Ledger in Spot Suite See what gets collected

Three frameworks, one operating layer

NIS2

Risk management, incident handling, supply chain, and executive evidence.

DORA

Applies since 17 Jan 2025. ICT risk management and incident reporting for financial entities.

ISO 27001

Annex A controls mapped to the Microsoft signals that support audit evidence requests.

What it reads

Read-only collectors. No agents on endpoints. Tenant-isolated by validated token.

Microsoft Graph
Entra ID
Intune
Defender for Cloud
Azure Policy
Azure Activity Log
SharePoint
Your ITSM

Pricing

Per tenant, per framework, per business unit. Private-offer or invoice paths are scoped during rollout.

Single tenant

€149

Published from Spot Suite catalog

One Microsoft tenant. One framework. Monthly evidence pack and drift digest.

Multi-framework

€299

Published from Spot Suite catalog

Three frameworks. Two business units. Exception register. Quarterly auditor pack.

MSP / multi-entity

from €799

Published from Spot Suite catalog

Multi-tenant administration. Per-customer packs. White-label option.