Notifications
Clear all
Topic starter
21/07/2026 8:54 am
I'm setting up a compliance program for a new SaaS product and hitting a common issue. Many of our controls are hybrids.
For example, our user access review is triggered automatically by Jira, but the actual approval or revocation is a manual step by a manager. In Hyperproof, do you create one control for the entire process, or split it?
I'm curious how others handle the evidence collection and testing for these mixed workflows. The automated part generates system logs, but the manual part requires a screenshot or sign-off. Do you link both pieces of evidence to a single control, or does that create tracking issues later?