> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Documents

> Upload, organize, and manage compliance evidence documents in one central location.

The Documents page is your central repository for all compliance-related files. Upload evidence documents, audit reports, certificates, and any other files your auditors need to review — everything lives in one place.

## What documents are for

During an audit, your auditor requests evidence — SOC 2 reports, penetration test results, insurance certificates, signed agreements, training records, and more. Instead of scrambling to find these files across Google Drive, email, and Slack, you upload them to DSALTA once. When the auditor needs them, they are already organized and ready.

## Viewing your documents

The document list shows all uploaded files with:

| Column          | Description                                                                                                                 |
| --------------- | --------------------------------------------------------------------------------------------------------------------------- |
| **Name**        | File name or title you assign                                                                                               |
| **Framework**   | Frameworks the document is mapped to; the first two are shown and any others collapse into a **+n** hover card              |
| **Uploaded By** | Who uploaded the document                                                                                                   |
| **Date**        | When the document was uploaded                                                                                              |
| **Status**      | **Completed** once the document passes, otherwise **No Evidence**; hover the badge for the `n/m Controls passing` breakdown |
| **Due Date**    | The document's review date, or **No Due Date**; once the date has passed the badge turns red                                |

Click any row to open the **Document** panel, which has **Evidence**, **Controls**, **Notes** and **Comments** tabs. The **Evidence** tab lists every file on the document with a download button, and **Add Files** attaches more.

## Uploading documents

1. Navigate to **Data Library → Documents** in the sidebar.
2. Click **Add Document**. The **Add New Document** dialog opens.
3. Drag and drop your file or browse to select it. Supported formats include PDF, DOCX, XLSX, PNG, JPG, and CSV.
4. Enter a **Title** (required, up to 100 characters), optionally a **Description** (up to 200 characters), and pick any **Frameworks** the document belongs to. Controls are mapped afterwards, from the document's **Controls** tab.
5. Click **Upload**.

Selecting several files in one go attaches all of them to a single document — one row in the list, with every file on its **Evidence** tab. Each file can be up to 50 MB. Run **Add Document** once per document you want listed separately.

## Organizing documents

Keep your repository navigable with the **Title** you give each document, the **Frameworks** you tag it with — the list has a **Framework** column and a matching filter — and the controls you map to it. A naming convention helps here, for example:

* **Certificates** — SOC 2 reports, ISO certificates, insurance certificates
* **Reports** — Penetration test results, vulnerability scan reports, risk assessments
* **Agreements** — DPAs, NDAs, vendor contracts, BAAs
* **Evidence** — Screenshots, configuration exports, audit logs
* **Policies** — Signed policy documents (these are separate from the Policies module, which handles approval and employee acceptance)

## Linking documents to controls

When you link a document to a compliance control, it appears as evidence for that control during audits. This means your auditor can see exactly which documents support each control requirement without you having to explain it.

To link a document to a control:

1. Open the document detail page.
2. Open the **Controls** tab and click the **+** button in its card header.
3. Search for and select the relevant control(s).
4. The document now appears as evidence under those controls in the Compliance section.

## Document expiry

Some documents expire — insurance certificates renew annually, penetration tests are valid for a year, SOC 2 reports cover a specific audit period. Track those renewals with the document's **Due Date**: set it from **My Tasks** using the row's **Change Due Date** action, and the Documents list shows it in the **Due Date** column, turning red once the date has passed. When the renewed file arrives, open the document and use **Add Files** on its **Evidence** tab, so the framework and control mapping already on that document carries over.

## Related pages

* [Policies](/guides/data-library/policies)
* [Audits](/guides/compliance/audits)