KB-043

Evidence folder setup in Dropbox

Applies to
All plans
Last reviewed
October 7, 2026
Version
1.0

For companies that keep files in Dropbox KB-043 | Applies to: All plans | Last reviewed: October 7, 2026

If your company keeps its files in Dropbox, you can store your evidence there too. This guide shows how to set up the folder and what to record in AffirmReady. Dropbox links work a little differently from other systems, so please read Step 3 before you copy any links.

Which Dropbox account to use

Use a Dropbox business or team account your company controls whenever you can. If you have a team account, create the evidence folder in a team folder so it belongs to the company rather than one person.

Step 1: Upload the folder kit

  1. Download and unzip the AffirmReady folder kit (see KB-040).
  2. Sign in at dropbox.com and open the team folder or location where you want to keep evidence.
  3. Select Upload, then Folder, and choose the CMMC L1 Evidence folder. You can also drag the folder into the browser window or into the Dropbox folder on your computer.
  4. Open the folder to confirm the subfolders uploaded.

Step 2: Limit who can open the folder

Share the CMMC L1 Evidence folder only with the people who need it, such as the owner, office manager, and IT provider. Select Share on the folder and invite them by email.

Step 3: Record the location in AffirmReady

In many Dropbox plans, a copied link works for anyone who has it unless you change its settings. Before you paste a Dropbox link into AffirmReady, check the link settings:

  1. Select Share on the file or folder, then open the link settings (the gear or Settings option).
  2. If you can, set who can access the link to Only team members or Only people invited.
  3. Copy the link and paste it into the evidence entry in AffirmReady.

If your plan does not let you restrict the link, skip the link. Instead, type the folder location into the evidence entry, for example: Dropbox > CMMC L1 Evidence > 4 Physical Protection > 09 Visitors, keys, and badges. That tells your team exactly where to look without creating a link that could travel outside your company.

Helpful tips

  • Dropbox links usually keep working if you move a file within Dropbox, but check the link in AffirmReady after any big reorganizing.
  • The Dropbox desktop app lets you save screenshots straight into the evidence folder from your computer.

If your screen looks different

Menus change from time to time. If a button or setting name does not match what you see, the goal is the same: a folder only your team can open, and a link that only works for people who already have access. Dropbox's own instructions: help.dropbox.com/share/create-and-share-link (Create a view-only link).

Still need help?

Email support@affirmready.com and include your company name and the email address on your AffirmReady account. Our team is available Monday through Friday, 8:00 AM to 5:00 PM Eastern, and replies within one business day.

For CMMC Level 1 readiness purposes only. Not legal advice. Your company is responsible for the accuracy of its self-assessment and affirmation.