# Compliance evidence

> Send joiners, leavers and policy acknowledgements to Vanta or Drata every day, so your HR controls stay evidenced without exports.

Audience: Workspace owners and administrators

Kind: How-to guide

Canonical: https://shuffl.ai/docs/compliance-evidence

<a id="what"></a>
## What it does

Auditors ask the same HR questions every cycle: who joined, who left, and who confirmed the policies. Shuffl already holds the answers. Connect your compliance platform once and Shuffl sends them there every day, as the evidence set your controls cite.

Only ids, names, work emails, dates, titles and statuses are sent. HR request text, reasons, time-off details and the pages themselves never leave Shuffl, and nothing is read back from the platform.

### What leaves Shuffl

- Joiners and leavers: every person in People with name, work email, job title, employment type, start and end dates and status. Each links to their People page.
- Policy acknowledgements: who confirmed which policy version and when, from Knowledge’s read-and-confirm, each linking to the policy.

<a id="vanta"></a>
## Connect Vanta

1. In Vanta, open Integrations → Custom and add a custom integration named Shuffl with two resource types: people, and policy acknowledgements. Copy each resource type ID.

2. Under Settings → Developer console, create an OAuth client for that integration with the connector write scope. Copy the client ID and secret; Vanta shows the secret once.

3. In Shuffl, open Settings → Compliance and choose Connect Vanta. Paste the client ID, secret, region and resource IDs, then Connect. The first batch goes at once.

4. Leave out a resource ID to skip that kind of evidence; you can add it later by reconnecting.

Vanta receives the evidence through a custom integration you own, so nothing waits on a marketplace listing. Shuffl syncs the full set to each resource on every push, so Vanta always holds the current picture.

- [Open Compliance](https://shuffl.ai/app/settings/compliance)

<a id="drata"></a>
## Connect Drata

1. In Drata, open Settings → API keys and create a key with the External Evidence and Personnel permissions. Copy it; Drata shows it once.

2. In Shuffl, open Settings → Compliance and choose Connect Drata. Paste the key, pick your region and choose Connect. Shuffl checks the key and sends the first batch at once.

3. In Drata, open the two Shuffl evidence items and attach them to your controls. Each new version carries the date it was sent.

Drata receives the evidence as External Evidence: Shuffl keeps one item per kind, named “Shuffl · Joiners and leavers” and “Shuffl · Policy acknowledgements”, and adds a new version on every push. Cite them from the controls your auditor asks about.

- [Open Compliance](https://shuffl.ai/app/settings/compliance)

<a id="manage"></a>
## Choose what is sent

1. Under What it receives, turn a kind of evidence off to stop sending it. Shuffl sends the kinds that are on; it never removes what the platform already holds.

2. Choose Send now to send a fresh set at once, for example before an audit call.

3. Turn Send evidence off to pause: the connection stays, nothing is sent. Turn it on to resume the daily send.

4. Choose Disconnect to stop for good. Shuffl forgets the credential at once. What the platform holds stays there.

Shuffl sends once a day. Each push is listed under its connection with its record counts, and a failed push names why in plain words. A refused credential marks the connection Needs attention until you reconnect.

- [Open Compliance](https://shuffl.ai/app/settings/compliance)

<a id="developers"></a>
## Developers and Mello

The SDK, CLI, MCP and REST API carry the same reads and actions: `compliance.current` with `integrations:read`; `compliance.setEvidence`, `compliance.pushNow` and `compliance.disconnect` with `integrations:write`. Connecting stays in Settings. Mello runs Send now as a card an administrator confirms.

## Related guides

- [Sync People from your HR system](https://shuffl.ai/docs/people-sync)

- [Review and publish knowledge](https://shuffl.ai/docs/knowledge)

- [Webhooks](https://shuffl.ai/docs/webhooks)

- [REST API reference](https://shuffl.ai/docs/api-reference)

Agent documentation index: https://shuffl.ai/llms.txt