**Findings:** Upload stops at file selection with no guided classification or tagging, high risk of misplaced/untagged evidence. - [ ] Implement post-upload wizard with the following prompts: - [ ] Assign evidence category / folder - [ ] Add tags (policy, risk, control mapping, audit year, etc.) - [ ] Specify related frameworks (ISO, SOC2, NIST, AI Governance) - [ ] Assign a reviewer or owner - [ ] Set retention or review cycle
Findings: Upload stops at file selection with no guided classification or tagging, high risk of misplaced/untagged evidence.