Compliance evidence
Compliance evidence and governed remediation, self-hosted
Evaluate versioned policies against your hosts, route failing findings into a governed fix with separation of duties, and keep evidence you can hand an auditor.
Last verified: July 28, 2026
Scanners tell you what's wrong and stop there. Praxis evaluates versioned compliance policies against host evidence, routes failing findings into a governed remediation workflow with requester and approver separation, and retains the evidence and change history behind every fix, all on infrastructure you run.
What Praxis does here
- Versioned compliance policies and checks; install a starter pack; evaluate per host with evidence, verdict, and severity.
- Governed remediation: open a request from a failing finding, enforce requester/approver separation, pass a fail-closed readiness gate, and dispatch approved package remediation through the patch transport.
- Exportable audit evidence; bulk compliance exports and scheduled reports are paid-edition entitlements, while the dashboard, policies, evidence reads, and remediation stay in the free tier.
- Audit events delivered to HTTP, RFC 5424 syslog, or file sinks, with event UUIDs for deduplication.
Why it's different
- Self-hosted with no call-home.
- A governed fix loop, not just detection.
- Evidence and change history tied to the same plane that applied the change.
Honest boundary: Praxis produces evidence and change-control history; it does not attest that your organization is compliant. Certification stays between you and your auditor. A supplied evidence map relates Praxis events to SOC 2, PCI DSS, and HIPAA discussions.
Praxis works alongside a SOC 2 / ISO attestation program (for example Vanta or Drata) as the host-level evidence and remediation engine. It feeds such a program; it does not replace it.
