Multi-framework compliance tracking and evidence management
Compliance evidence artifacts (audit logs, reports, certificates) are stored securely in external object storage (S3, R2, or GCS).
Access is controlled via signed URLs with time-limited validity. All artifact operations are audit-logged in the database.