Context

Businesses often need documentation to prove their security compliance status to their customers or stakeholders. This may include engagement letters for audits or penetration test results that demonstrate their commitment to security practices.

Answer

There are two main types of documentation available:

1. Penetration Test Reports from Mycroft

   • Draft versions are uploaded to the evidence section in your portal at app.mycroft.io/evidence

   • Final versions will be published in the same location after management responses are incorporated

   • A shareable letter summarizing the pentest results can be provided upon request

1. Engagement Letters

   • These are formal documents confirming your participation in security assessments

   • Letters can be requested from Customer Success for a Mycroft engagement letter, or if you work with one of our audit partners

   • Documents will be sent via email for review before being distributed to your team

To request either type of documentation, reach out to us. We can provide you with the appropriate documentation and help coordinate any necessary reviews before sharing with your stakeholders.