EU AI Act · Evidence Management

EU AI Act Evidence Readiness — know your gap before the auditor does.

EAB tracks evidence status at obligation level — not as a folder, not as a checklist, but as a live record where every evidence item is attached to the article it satisfies and the obligation it closes.

When an auditor arrives, the evidence is already organised, attributed, and linked. Nothing needs to be assembled. Nothing needs to be explained.

Obligation-level tracking Evidence attached per article Gap visible before audit
Tracking granularity
Obligation
Evidence tracked per obligation area, per article — not per system as a whole.
Evidence location
Attached
Evidence is attached to the obligation record — not stored in a folder separate from the compliance record.
Derived from
Screening
Obligation set derived from screening result — not filled in by hand or left to interpretation.
Non-applicability
Stated
Obligations that do not apply are explicitly documented — blank is never an acceptable compliance state.
How tracking works

Evidence attached to obligations — not stored separately.

When a screening result is approved, EAB derives the obligation set automatically from the risk classification and actor role. Each obligation area is activated with a status — open, in progress, complete, or explicitly non-applicable. The status cannot be set to complete without attached evidence or a stated non-applicability justification.

Evidence is attached directly to the obligation record. A technical documentation file satisfies Annex IV. A human oversight policy satisfies Art. 14. A risk management record satisfies Art. 9. Each evidence item is linked to the specific article it addresses — not dropped into a folder where the link between document and obligation depends on the reader's memory.

The evidence readiness score gives a real-time view of obligation completion across all AI systems — not a status field someone updated manually, but a derived measure from the actual obligation records. The gap is visible at system level and at obligation level. An auditor reviewing the record sees the same view the compliance team uses — there is no prepared summary.

Evidence Tracking Includes
  • Annex IVTechnical documentation checklist
  • Art. 9Risk Management System evidence
  • Art. 10Data governance records
  • Art. 13Transparency documentation
  • Art. 14Human oversight provisions
  • Art. 17Quality Management System
  • Art. 43Conformity assessment (if Annex III)
What you get

Six evidence capabilities.

Every evidence item attached, every gap identified, every non-applicability stated — before anyone asks.

Derivation

Obligation Set from Screening

The obligation set is derived automatically from the screening result and actor role. No manual entry. No interpretation. The law tells EAB what applies — EAB activates the obligation areas and assigns status.

Attachment

Evidence per Obligation

Documents, policies, records, and declarations are attached directly to the obligation they satisfy. The link between evidence and article is structural — not a naming convention in a shared folder.

Readiness Score

Live Gap Visibility

The evidence readiness score is derived from actual obligation status — not a self-assessed percentage. Green means evidenced or explicitly non-applicable. Amber means in progress. Red means open with no action. The gap is visible in real time — not discovered at audit time.

Non-Applicability

Stated — Not Blank

When an obligation does not apply to a specific system, the non-applicability must be explicitly stated with a justification. Blank is not a valid compliance state in EAB. An auditor sees a stated position — not silence.

History

Evidence Version History

When evidence is updated or replaced, the previous version is preserved. An auditor can verify that evidence was present at the time of obligation completion — not added after the fact ahead of a review.

Export

Evidence Package per System

PDF export of the complete evidence package per AI system — each obligation, its status, its evidence references, and its legal article. The export reflects the state at the chosen reference date, not the current state.

Evidence management

Evidence organised before the auditor asks.

Every obligation tracked, every evidence item attached, every gap visible — in real time, not assembled the night before a review.

EU-hosted · Anchored to CELEX 32024R1689

Get in Touch
Request More Information

Tell us about your organization and what you’re looking to address. We’ll follow up with the relevant information.