Connect an evidence connector

By the end a tool your teams already use will feed items into your evidence library, and each one a colleague has accepted will count towards the obligations it is linked to.

Before you start

• Plan: Govern includes one evidence connector; Manage and above include all of them. The Classify and Starter plans include none.
• Who: an Org admin connects and disconnects a tool (Connect and disconnect integrations). Bringing items in needs Import and sync evidence from integrations and Upload new versions of evidence. Accepting an item needs Approve evidence, programme steps and risk-plan sign-off — and a different person from the one who brought it in.
• Which tools: Google Drive, SharePoint / OneDrive, GitHub and Jira, each over a read-only connection. Checked links in the same list works without connecting anything; the rest are marked planned.

Steps

1. In the rail, under Do the work, open Evidence. In the Bring evidence in automatically bar, press All connectors.
2. Open the tool's card, press Connect followed by its name — Connect GitHub, for example — and approve the provider's consent screen. You come back to Evidence, and the card reads Connected.
3. Bring items in. For SharePoint / OneDrive, GitHub and Jira, press Sync now. For Google Drive, the person who connected it presses Choose files and picks the documents in Google's own picker, which browses their Drive; only those files are read.
4. Each new item lands in the Library as connected evidence, Pending review. Bringing an item in again refreshes its title and leaves its review as it was.
5. Click an item to open Record details, then press Linked obligations. Under Link to another obligation, choose the system and the obligation and press Link.
6. A colleague with the approve permission opens the same record and presses Record review. Under Review decision they choose Reviewed — accept, or Returned — needs changes with a rationale, and press Record review.

What you have now

A connected tool, and items from it in your library. A connector reading an item proves the item exists, not what it proves, so each one stays Pending review until a person decides. An accepted item is sealed and counts towards the obligations it is linked to; a returned one does not. Disconnect removes the connection after a confirmation, and evidence already brought in stays in your library.

If something goes wrong

• The card says "Ask an org admin to connect". Only an Org admin can connect a tool.
• There is no Connect button, and the card talks about your plan. Either your plan includes no connectors ("Evidence connectors start at Govern"), or its one connector is in use: disconnect that one first, or move to Manage.
• A sync or a file pick fails. The message says why. When the provider has withdrawn access, an Org admin presses Disconnect and connects the tool again.
• You cannot review an item. The drawer says you added this version, so another approver reviews it. Items you brought in count as added by you.

Related

• OAuth evidence connectors: Drive, SharePoint, GitHub, Jira
• The Evidence hub: sealed files, links, connectors and freshness
• Attach evidence and verify generated documents
• Plans, billing and upgrades