EU Evidence Register
A starter list of the evidence an auditor would request for an AI system under EU rules, by control family. Use it with the T08 audit checklist, and fill in the last two columns as requests are made and answered.
The same data is available as a CSV file: evidence_register.csv.
| Ref | Family | Evidence item | Wiki control | Format | Requested date / owner | Received date / status |
|---|---|---|---|---|---|---|
| E01 | Governance | AI policy approved | AI-CTRL-012 | Policy | ||
| E02 | Governance | Roles and accountability matrix | AI-CTRL-012 | RACI | ||
| E03 | Governance | Board AI risk reporting | AI-CTRL-037 | Minutes | ||
| E04 | Literacy | Programme and completion records (T07) | AI-CTRL-012 | Records | ||
| E05 | Inventory | AI inventory (T09) | AI-CTRL-011 | Export | ||
| E06 | Inventory | Discovery sweep output | AI-CTRL-011 | List | ||
| E07 | Classification | Classification records incl. role and Art. 5 screen (T01) | AI-CTRL-011 | Forms | ||
| E08 | Classification | Art. 6(3) assessments and registration | AI-CTRL-011 | Records | ||
| E09 | Risk | Risk management records | AI-CTRL-037 | Register | ||
| E10 | Data | Data governance and bias examination (T10) | AI-CTRL-013; AI-CTRL-041 | Reports | ||
| E11 | Documentation | Technical file (T10) | AI-CTRL-038 | File index | ||
| E12 | Documentation | Instructions for use | AI-CTRL-039 | Document | ||
| E13 | Logging | Log design and sample reconstruction | AI-CTRL-008; AI-CTRL-038 | Samples | ||
| E14 | Oversight | Oversight design and review logs with overrides | AI-CTRL-023 | Logs | ||
| E15 | Oversight | Kill-switch test record | AI-CTRL-025 | Report | ||
| E16 | Security | Robustness and adversarial test reports | AI-CTRL-005; AI-CTRL-034; AI-CTRL-039 | Reports | ||
| E17 | Conformity | Declaration, CE marking, registration evidence | AI-CTRL-038 | Copies | ||
| E18 | Privacy | DPIA/FRIA (T02) with DPO advice | AI-CTRL-013; AI-CTRL-042 | Assessments | ||
| E19 | Privacy | Lawful basis records | AI-CTRL-013 | Records | ||
| E20 | Privacy | Rights request log and test | AI-CTRL-017 | Log | ||
| E21 | Transfers | Location and transfer record (T04) with TIA | AI-CTRL-007 | Records | ||
| E22 | Transparency | Notices and marking tests (T06) | AI-CTRL-039 | Screenshots, tests | ||
| E23 | Fairness | Bias test records | AI-CTRL-041 | Reports | ||
| E24 | Fairness | Explanation records sample | AI-CTRL-041 | Sample | ||
| E25 | Suppliers | Due diligence (T03) and contracts | AI-CTRL-014 | Records | ||
| E26 | GPAI | GPAI checklist (T12) | AI-CTRL-014 | Checklist | ||
| E27 | Incident | Playbook and regime matrix (T05) | AI-CTRL-035 | Document | ||
| E28 | Incident | Tabletop report and incident register | AI-CTRL-035 | Reports | ||
| E29 | Post-market | Monitoring plan and results | AI-CTRL-035 | Reports | ||
| E30 | Authorities | Authority register and contact log (T11) | AI-CTRL-013 | Log | ||
| E31 | Assurance | Evidence retention rule and prior findings tracker | AI-CTRL-038 | Policy |