Auditing Workday configuration - replication dates

I am receiving many emails in the past weeks about auditing Workday.  Workday offers courses specifically tailored for auditing professionals.  In case you are preparing for a WD audit, I'd like to share some of these solutions with you.

From the mailbox:

I am an Auditor and my client uses workday. I audited configurations on Sandbox and client mentioned that Sandbox is replicated from production environment but client was not able to show me how to see replication dates. 

Can you guide me , how to see replication date or configuration for replication (Prod > Sandbox)?

As a former IT auditor, these questions make my day.  Auditors are not dreadful people.  One of the key rules I've found with auditors is that 'there are many routes to the same city.'  Meaning:  as long as you can prove something to me, I don't care what method you use, as long as it is reliable. 

Question:  How do I prove when a Workday Sandbox was copied from Production?

1. Ask the customer to log on to Workday Community and print out the documentation that states mandatory sandbox refreshes once per week (it exists, including the timing).

2. Ask the 'Named Support Contact' (the person who can ask for/defer refreshes) to log on to Workday Community ad to go to the tenant management page.  Print this log.  It will prove that the customer did not put in any 'defer sandbox refresh' requests during your audit test period.  Therefore you can depend on the copy date as detailed in step one.