How are you handling evidence collection for SOC 2/ISO 27001 controls that rely on Slack or Teams conversations?

We're preparing for another audit and one thing that still feels messy is collecting evidence for controls that rely on Slack or Teams conversations.

Things like:

• Security approvals
• Change management discussions
• Access requests / approvals
• Incident communications

Curious what everyone's workflow looks like.