EU AI Act evidence package
Start with the obligation the package must address. Identify the AI system version, applications, and review period before selecting records.
Assemble the package
- Confirm the organization’s role and applicable article.
- Select the applications, environments, records, and date range.
- Export the authorized VeriProof evidence.
- Verify the manifest and configured proof-provider material.
- Add customer-owned policies, technical documentation, risk analysis, approvals, and corrective actions.
- Record exclusions, evidence gaps, and package ownership.
Package index
Include an index that identifies:
- purpose and recipient;
- system and version;
- application and environment scope;
- start and end dates;
- each file and its source;
- verification result;
- known exclusions; and
- review and approval record.
Delivery
Use an approved secure channel. Confirm the recipient may receive the selected records and personal data.
The package supports the organization’s assessment. It does not establish conformity or replace a regulator’s required submission format.
Related guidance
Last updated on