Documents and evidence

  • 3:54
  • How-to
  • Narrated by Sekura
  • English
  • Updated Oct 2026

TranscriptClick a line to jump there

What Sekura says

0:00In this lesson you'll learn what to upload for a company, how Sekura reads each document, how to evaluate a document for an assessment, and how a document differs from evidence.0:12First, what counts as a document? Any file that shows how the company really works. Policies say what should happen. Procedures say how it's done. Records, such as an asset inventory or an incident log, show that it actually happened. An auditor asks for all three.0:31Evidence is something else. A document just sits in the company's files. Evidence is a link between a source and one specific verdict or risk. It says: this is what backs that decision. One policy can be evidence for several requirements, and evidence can also be a knowledge base page or a written note.0:53Each company has its own documents. Open the company, then in the sidebar open Information and click Documents. Files the company's people send through its portal land here too.1:05Click Upload document. Pick the Type, such as Policy (PDF), choose the File, and add a Description if it helps. Then click Upload file.1:17As soon as it's uploaded, Sekit turns the file into text the agents can read. It reads PDF, Word, Excel, PowerPoint, text files and images. Scanned PDFs and images are read too, in the background. A format Sekit can't read is still kept, just not analysed.1:36Now the useful part. On a document's row, click Evaluate for an analysis. Choose the Analysis. Leave Also flag risks on if you want Sekura to point out risks the document reveals. Then click Evaluate.1:52Here's what Sekura does. First it works out which requirements of that assessment the document backs, if any. For each one, it links the document as evidence and grades the requirement. If you've already approved a verdict, Sekura doesn't change it: it suggests a change instead. Every change is listed in Agent updates for you to review.2:14There's a shortcut. Open the assessment itself and drag a file onto the page. You'll see Drop to evaluate for this analysis. Sekit adds the file to Documents and evaluates it for that assessment as soon as its text is read.2:29Here, a new file has just been uploaded: an internal audit programme for 2026. It's evaluated for the company's ISO 27001 readiness.2:41When Sekura has finished, open Agent updates. If it found that the programme backs a requirement, there's an update for it. The verdicts here are already approved, so it reads New evidence on an approved evaluation, with the programme's name.2:56Open it. The Suggested change names the requirement Sekura graded. If the status it suggests differs from the one you approved, it shows both. If you agree, click Apply suggestion. Either way, the programme is already linked to that requirement as evidence.3:14Tip. A tip: before you ask anyone for a document, open the requirement and read Expected evidence. It tells you what an auditor will want to see, so you ask for the right file the first time.3:26To recap. Documents show how the company works. Sekura reads each one as text, scans included. Evaluate a document for an assessment and Sekura links it as evidence wherever it backs a requirement. And every change is listed in Agent updates for you to review.3:45Thanks for watching! For more GRC lessons, visit our Learning Center at sekit.ai/learn-center.

Chapters

You'll learn

  • What to upload for a company
  • How Sekura reads each document
  • Evaluate a document for an assessment
  • The difference between a document and evidence

Try it

Do it yourself, in 3 minutes

Start a free trial. Sample data is already loaded, and the tour opens on this exact screen.

Start free trialAlready a customer? Open in Sekit

Key terms

Document
A file that shows how the company works, such as a policy, a procedure or a record.
Evidence
A link between a source and one verdict or risk. It says what backs that decision.
Agent updates
The list of what an agent wrote for a company, for you to review.

NextGetting started

Keep going

Sekit, end to endConcept · 3:35What Sekit is for, how it is organised around companies, and the four parts of GRC work in it.Your companiesHow-to · 3:38Add a company with the setup wizard, keep its profile current, and switch between companies.Sekit is AI-firstConcept · 4:35Work with Sekura in the console, connect your own agents over MCP, and let skills guide the AI.