You can export organized evidence directly from either the Controls or Frameworks page.
From either page you can export by:
Click the Export icon in the top-right corner of the page (next to the filter and column controls).
Your export will begin immediately as a direct CSV download.
Note: The export reflects your current view, including any filters or column selections you’ve applied.
Bulk export all test evidence from the Frameworks page
Evidence needs a framework scope row for tests and exports to treat it the same way. When a framework is added, Secureframe writes scope rows for archived evidence so test results and exports agree.
FedRAMP 20x JSON export is available on the Class A, B, and C frameworks, not only FedRAMP 20x Low.
Ignored evidence is included in evidence exports, with justifications available for auditors.
Navigate to the Frameworks page.
Select a framework and click View DetailsClick the Export button in the top-right corner
Choose Test Evidence, this will export all test evidence
You will receive an email with the exported files.
The email delivery time may vary depending on file size.
Download the files within 24 hours before the link expires.
Frequently Asked Questions (FAQ)
How can I export a readiness report from Secureframe?
Go to the Frameworks section, select the framework you want (e.g., ISO 27701), and click Export in the top right corner. From the export menu, choose the sections you’d like to include (such as control mappings, test mappings, test evidence, or statement of applicability), then click Export. Once generated, your file will appear in the Data Room under the Exports folder.
Why might evidence look in-scope in an export but out-of-scope for a test (or the reverse)?
Evidence needs a framework scope row for tests and exports to treat it the same way.
When a framework is added, Secureframe writes scope rows for archived evidence so test results and exports agree.
Is FedRAMP 20x JSON export available beyond FedRAMP 20x Low?
Yes. FedRAMP 20x JSON export is available on the Class A, B, and C frameworks, not only FedRAMP 20x Low.
Can auditors see ignored evidence, and is it in exports?
Yes. Ignored evidence is visible to auditors with justifications and is included in evidence exports.