> ## Documentation Index
> Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Evidence Packages

> Generate and download compliance evidence packages for HIPAA, SOC 2, Joint Commission, and CARF frameworks at /settings/compliance/evidence.

The Evidence Packages page (`/settings/compliance/evidence`) allows compliance administrators to generate, download, and track compliance evidence packages for regulatory frameworks including HIPAA, SOC 2, Joint Commission, and CARF.

## Overview

The page is gated by `pf.compliance.evidence.generate`. It uses `useComplianceEvidenceJobs` to load the list of past generation jobs, `useGenerateEvidence` to trigger new generation, and `useComplianceTheme` for organisation-specific white-label compliance theming (which applies `ContrastFallbackIndicator` when theme contrast issues are detected). Evidence jobs are displayed in a `Table` showing framework, generation date, file size, status, and actions (view/download). A **Generate Evidence** dialog accepts a framework selection and optional label. Completed jobs show a download button that fetches the evidence file from Supabase storage. A detail `Sheet` component (`EvidenceDetailSheet` via row click) shows the full job metadata. Status badges use `STATUS_BADGE` configuration for `generating`, `completed`, and `failed` states.

## Who it's for

Requires permission `pf.compliance.evidence.generate`.

## Before you start

* You must hold `pf.compliance.evidence.generate`.
* Identify the regulatory framework for which you need to generate evidence.

## Steps

<Steps>
  <Step title="Open Evidence Packages">
    Navigate to `/settings/compliance/evidence`. Past generation jobs appear in the table.
  </Step>

  <Step title="Generate a new evidence package">
    Click **Generate Evidence**. In the dialog, select the framework (HIPAA, SOC 2, Joint Commission, or CARF) and optionally enter a label. Confirm to start generation.
  </Step>

  <Step title="Monitor job status">
    Jobs in `generating` status show an animated badge. Refresh or wait for the status to change to `completed` or `failed`.
  </Step>

  <Step title="Download a completed package">
    When the job status is `completed`, click the **Download** icon to retrieve the evidence file from Supabase storage.
  </Step>

  <Step title="View job details">
    Click a row to open the `EvidenceDetailSheet` with full job metadata and file details.
  </Step>
</Steps>

## Key concepts

<AccordionGroup>
  <Accordion title="Supported frameworks">
    The four supported frameworks are `hipaa` (HIPAA), `soc2` (SOC 2), `joint_commission` (Joint Commission), and `carf` (CARF). Framework labels are defined in `FRAMEWORK_LABELS`.
  </Accordion>

  <Accordion title="Compliance theming">
    `useComplianceTheme` applies white-label compliance branding. `ContrastFallbackIndicator` is shown when the organisation's brand colours do not meet contrast requirements.
  </Accordion>
</AccordionGroup>

## Related

<Columns cols={2}>
  <Card title="Platform Foundation" icon="layer-group" href="/pf/overview">
    Platform Foundation overview.
  </Card>

  <Card title="Governance & parity" icon="scale-balanced" href="/governance/index">
    Documentation coverage and governance.
  </Card>
</Columns>

<Note>
  This page documents shipped product behavior. It is not medical, legal, or
  billing advice. Verify against your organization's policies and applicable
  regulations before using it for clinical, compliance, or billing decisions.
  Protected health information (PHI) shown in the product is governed by your
  tenant's access controls and is never exposed in this documentation.
</Note>

<Accordion title="Documentation sources">
  * src/routes/platform.tsx
  * src/platform/compliance/pages/ComplianceEvidencePage.tsx
  * src/platform/compliance/hooks/useComplianceEvidenceJobs.ts
</Accordion>