Auditor asking for access review evidence we never recorded

We’re going through our SOC 2 renewal and the auditor is asking for evidence for everything (2024) like access reviews, onboarding/offboarding everything

Problem is this:
No one stored anything we don't have any screenshots or logs. The guy who owned security left six months ago and apparently he didn't document and keep track of everything
Now leadership is asking me to ‘recreate’ what happened last year (in my head I think it's impossible but I don't wanna give an answer without being 100% sure)
What do you suggest me to do?