We're working on a better change management process for production deployments and SOC 2 audit evidence.
https://www.approvegate.io
I'm a Senior Eng on Wall Street, so I have my own personal experience with this problem, but i'd love to connect with other leads, release managers, etc to get their thoughts, suggestions, and what their current process looks like.