This article explores a novel Dynamic Evidence Attribution Engine powered by Graph Neural Networks (GNNs). By mapping relationships between policy clauses, control artifacts, and regulatory requirements, the engine delivers real‑time, accurate evidence suggestions for security questionnaires. Readers will learn the underlying GNN concepts, architectural design, integration patterns with Procurize, and practical steps to implement a secure, auditable solution that dramatically reduces manual effort while enhancing compliance confidence.