Record format
- Entity: tool or category being reviewed
- Claim: GDPR / SOC 2 / region / self-hosting
- Evidence: trust center / DPA / certification statement
- Outcome: verified / not verified / unknown
- Next review: scheduled
This page documents the audit workflow: what evidence is recorded, how unknown is treated, and when re-review is triggered.