Preparing a fintech evidence room for an independent control review

An evidence room is not a dump of every spreadsheet your firm has ever created. It is a curated set of files that let an independent reviewer test the controls you claim to run. Over-sharing slows everyone down; under-sharing creates avoidable findings.

For a typical East Vale control audit we ask for: the product control narrative, the last complete month of reconciliations, the approval matrix, open and aged exception logs, custody or float reports, and a list of known process changes during the period.

Name one coordinator. When five people email attachments with overlapping versions, sampling stalls. The coordinator should know which file is authoritative and who can answer walkthrough questions within a business day.

If you operate multiple rails—card acquiring, domestic transfers, and a wallet float—label evidence by rail. Mixed folders force auditors to reconstruct your organisation chart from filenames, which wastes the calendar you paid for.

Good preparation does not guarantee a clean memo. It does guarantee that findings, if any, rest on facts rather than missing documents.