The approval register
Read an answer against the document that backs it, then sign what you decided. The signature, your name and your note stay on the answer’s trail.
Worked example
Yes. Customer records are encrypted at rest with AES-256, and the keys rotate every twelve months in the cloud key service.
Page six states the twelve-month rotation we shipped in December.
The review queue
Write the answer, name the person who stands behind it and the document that proves it. A reviewer signs the row with what they checked, and that signature counts for ninety days.
0 of 5 answers kept
No answers yet. The first one goes at the top of the register, with its owner and its evidence.
A signature is good for 90 days. 14 days before it lapses the row starts warning, and after that the answer stays here, marked stale, until someone signs it against current evidence.
The answer check
Paste the answer and the passage from the policy, plan or report behind it. What comes back names the claims that passage does not carry, so the gap shows up before a signature goes on the register rather than in the next questionnaire that quotes it back.