Security & Compliance Platform Enhancements

[adhit-r]

Description

Build out the security and compliance platform features — access control, evidence tracking, vendor risk, and third-party integrations.

Scope

• Advanced access control & permissions (RBAC, team-based access)
• Third-party compliance tool integrations (API connectors)
• Vendor risk assessment & supply chain security scoring
• Automated control assessment & testing engine
• Attestation management & evidence tracking (extends existing EvidenceService)

Consolidates

#75, #77, #83, #89, #90

[IlyasFardaouix]

I think I see where you're headed with this. Have you checked out the existing EvidenceService implementation in services/evidence.py? It seems like you're looking to extend this feature, but I'm not sure if it's the best place to start for the attestation management & evidence tracking feature. We might need to reconsider how we're structuring our services to accommodate this new requirement. Can you clarify how you envision the relationship between EvidenceService and the new attestation management feature?