CtrlVouch — SOC 1, SOC 2 & SOX Evidence

Capture SOC 1, SOC 2 & SOX audit screenshots via custom hotkey and bundle to ZIP, Local Drive, AWS S3, or Azure Blob Storage.

CtrlVouch streamlines compliance evidence collection for SOC 1 (SSAE 18 / ICFR), SOC 2 (Trust Services Criteria), and SOX (Sarbanes-Oxley Section 302/404 ITGC & Automated Financial Controls) audits. Instead of manually taking screenshots, renaming files, pasting timestamps, and sorting folders by control ID, CtrlVouch lets you select an audit control, press a single customizable hotkey on any web page, and automatically stamp, hash, and organize your evidence into an auditor-ready ZIP bundle. KEY FEATURES: • Built-In Catalog of 52 SOC 1, SOC 2 & SOX Controls: Pre-loaded with control objectives and required screenshot evidence guidance across SOC 1 ICFR, SOC 2 (CC1–CC9, Availability, Confidentiality, Processing Integrity, Privacy), and SOX ITGC/Financial controls—plus support for adding custom controls. • Custom Single Hotkey Capture: Bind any key or shortcut (e.g., Alt+Shift+S, F9, Alt+S) to immediately capture the active browser tab without opening menus. • Tamper-Evident Audit Banner & SHA-256 Checksum: Automatically stamps each screenshot with Framework, Control ID & Title, UTC Timestamp, Source URL, Page Title, Auditor Name, Environment tag (PRODUCTION / STAGING / UAT), and the cryptographic SHA-256 hash of the raw capture. • One-Click Structured ZIP Bundle: Exports all screenshots organized into <Framework>/<Control_ID>/ folders along with an audit_evidence_manifest.json, spreadsheet-ready audit_evidence_log.csv, and an interactive HTML Evidence Index Report. • Flexible Storage Integrations: 1. Local Drive Folder Mapping: Save bundled ZIP archives directly to a mapped local or network drive folder using the File System Access API or Chrome Downloads. 2. AWS S3 Integration: Upload ZIP bundles or individual screenshots directly from your browser to your Amazon S3 bucket using native Web Crypto AWS Signature Version 4 (AWS4-HMAC-SHA256). 3. Azure Blob Storage Integration: Upload directly to your Azure Blob container using a SAS Token/URL or Storage Account SharedKey. • 100% Client-Side & Private: Zero external servers or telemetry. All screenshots and settings stay strictly in your local browser until you export them to your own storage. • Light & Dark Themes: Crisp Light Theme by default with a one-click Dark Theme toggle. PUBLISHER & COPYRIGHT: CtrlVouch is developed and published by BooBilli. © 2026 BooBilli. All rights reserved. LEGAL & TRADEMARK DISCLAIMER: CtrlVouch is provided by BooBilli "AS IS" without warranty of any kind, express or implied. Users are responsible for verifying compliance evidence completeness with their external auditors. SOC 1® and SOC 2® are registered trademarks of the American Institute of Certified Public Accountants (AICPA). BooBilli is an independent software provider and is not affiliated with, sponsored by, or endorsed by the AICPA.