Spent another week turning Intune screenshots into audit evidence. There has to be a better way, right?

Audit prep hit again and I'm losing my mind.

We're running Intune across ~200 devices, mix of Windows laptops and iOS phones. Going through HIPAA this year and prepping for SOC 2. The actual security posture is fine. The painful part is the translation work.

Every cycle I end up doing the same thing:

1. Pull Graph API exports of compliance policies, configuration profiles, device inventory
2. Cross-reference against a spreadsheet of controls (HIPAA §164.312, NIST mappings, SOC 2 CC criteria)
3. Take screenshots that go stale within a week
4. Write narrative docs explaining how our specific Intune settings satisfy each control
5. Pray the auditor accepts the evidence pack

The kicker is Intune already knows everything. Encryption status, OS versions, app inventory, policy assignment, compliance state. It's all sitting in Graph API. But there's no way to say "show me my fleet's posture mapped to HIPAA controls with timestamped evidence."

Vanta and Drata sort of help but their MDM integration is surface-level. It tells the auditor "BitLocker is on" and stops there. Doesn't go into device-level config depth that a serious assessor pokes at.

Genuine questions for the group:

1. How are you handling this today? Spreadsheets? GRC platform? Consultant doing it manually at $250/hr?
2. How many hours does evidence prep actually eat per audit cycle? I'm at 60-80 hours and want to know if I'm bad at this or if everyone's drowning.
3. For those who've been through recent HIPAA, CMMC, or PCI assessments, what evidence format did the auditor actually accept? Was it screenshots, exported reports, or something else?
4. Has anyone built something internal to automate this? Would love to know what's worked.

I've been sketching out what a tool that actually went deep on this would look like. Read-only API connection to Intune (or Jamf), continuous mapping of your real config to specific control IDs, gap detection in plain English, evidence export that auditors will accept. Not a Vanta replacement, just the deep MDM piece.

If that sounds like something you'd use, or if you've already solved this and want to tell me why I'm wrong, drop a comment or DM. Trying to figure out if this is a real pain or just my pain before I waste a quarter building something nobody wants.