# Evidence about your coding agents, ready for your auditor

Markdown twin of <https://usezn.com/soc2/>.

Auditors have started asking how coding agents are controlled. Team gives you records that can
support your answers: who changed the rules, what each agent was allowed to do and what was
blocked. It is not a certification and it does not make a team SOC 2 compliant.

## Evidence Team can export

- **Audit trail.** Every decision zn-gate takes, blocked ones included, as CSV or JSON from Audit
  evidence in the dashboard. Each export is listed with its date, author, filters, number of rows
  and SHA-256.
- **Organization evidence.** The zn-gate audit trail and the cloud checks of your members' API
  keys in one file, as OpenTelemetry (OTLP JSON Lines), CSV or JSON. It goes into the same export
  log.
- **Policy and roles.** The role list in Members and the policy history in Policies: each version,
  who published it and when.
- **Installs view.** The last policy version each machine has seen, its last upload and the
  machines that have gone silent.

Each machine chains its records with an HMAC, so gaps, reordering and edits are visible. Exports
are deterministic: the same records give the same file and the same hash. People appear as an
opaque member id, never as an email, and the trail holds metadata only (secret names, agents,
tools, hosts, decisions), never secret values, prompts or tool output.

## A routine that works

1. Publish the policy before rolling agents out, and write down why each rule exists.
2. Give your auditor the Auditor role: they can read the policy and read and export the trail,
   without a seat and without installing anything.
3. Export every month (CSV or JSON for the auditor, OpenTelemetry for your SIEM) and keep each
   file with its hash. zn keeps audit records for 180 days and cloud evidence for 90 days, while
   a Type II review usually covers 12 months, so your monthly exports cover the rest.
4. Review the installs view monthly: machines that stopped checking in are part of what an
   auditor will ask about.

## What Team does not cover

- It is not a certification and it does not make you SOC 2 compliant. Your controls, your
  auditor and your report decide that.
- It is not an MDM: someone with administrator rights on their machine can leave the
  organization. The dashboard shows it; it does not prevent it.
- It records what zn-gate decides, not everything an agent does.
- SSO, SCIM, pushing the trail straight to your SIEM and retention longer than 180 days are not
  part of Team v0. [Contact us](https://usezn.com/contact/) if your audit needs them.

## The Team plan

- $19 per seat per month, or $15 billed annually. From 2 to 50 seats; pending invitations count as seats in use.
- Owner, admins and members, plus a read-only auditor who can export the audit trail without using a seat.
- 14-day trial. Polar asks for a card and charges nothing before the trial ends. Cancel at any time from the billing portal.

## Go deeper

- [SOC 2 and AI coding agents: the questions and the evidence](https://usezn.com/docs/team/soc2/)
- [Export the audit trail](https://usezn.com/docs/team/export/)
- [Team overview](https://usezn.com/docs/team/)
- [Team pricing](https://usezn.com/pricing/#team)