Register, data-flow map, control matrix and exception log, generated from the record.
Evidence Packs generate the register, data-flow map, control matrix and exception log from the record, rather than assembling them by hand.
Audit evidence is usually assembled by hand, late, by the people with the least time.
Audit preparation is a project, and the pack is out of date before it is handed over.
of businesses using AI have security practices that cover it
DSIT, 2026The benefits of Evidence Packs.
The people who feel the problem first.
Hand over evidence without a project.
Show you are in control.
Answer diligence questions quickly.
Three ways teams use Evidence Packs.
Produce the pack for the period asked.
Show how AI is governed.
Answer the AI governance questions.
Works best alongside.
Controls mapped to ISO/IEC 42001, UK GDPR, DUAA, SOC 2, Cyber Essentials.
See Compliance Mapping LogLog: the record of events.
See Log Control MatrixWhich controls apply, where, and whether they are working.
See Control Matrix All of EvidenceA record of what AI saw, produced and who approved it, with reports against the regulations and your policies. Used with Guard.
See the Evidence modulePrices are indicative ranges, confirmed in writing before you commit. Estimates are replaced by your own figures once your health check runs.
See Evidence Packs working on your business.
First findings within 48 hours of the health check · Audit fee credited against year one