Procurement, auditors and customers are already asking

When they ask how you govern your AI, can you prove it?

Using a CV-screener, a credit scorer or a payroll model, or anything that ranks or scores people? That’s the AI this covers.

Audit Evidence captures each AI-assisted decision as a signed-off evidence pack. So when someone asks, you send the proof instead of scrambling to pull it together.

From £1,200/year. 14-day free trial, no card needed.

auditevidence.ai/demo/pack
Credit Application Scoring
Meridian Financial Group · EU AI Act Art. 26
Readiness88/100
Sections
1.Human Oversight & Control
2.Risk Classification
3.AI System Characteristics
4.Accuracy and Performance
5.Documentation and Evidence
6.Governance and Accountability
Human Oversight & Control
Complete
Section 1 of 6 · Aligned to EU AI Act Art. 26
Is there a documented process for human review of AI credit decisions? ✓
Describe who reviews, when, and how it is logged
Yes. All credit decisions above £10,000 are reviewed by a qualified Credit Risk Manager before a final decision is communicated to the applicant. Override decisions are logged in our Loan Origination System...
Who is the named oversight owner for this AI system? ✓
Name, role, qualifications, and reporting line
Sarah Okafor, Head of Credit Risk. Holds CFA and FRM qualifications and has direct authority to halt or override the system. Reports to the CRO...
Read-only demo
Next section →
Credit Application Scoring · Meridian Financial Group · Section 1 of 6

Why it matters now

The question usually comes from a customer or an auditor long before it comes from a regulator.

Either way, what counts is whether you can show your work.

First · the question

When someone asks you to prove it

Auditors, customers and your own board increasingly want to see how you govern the AI in your hiring, pay and people decisions: not a policy document, but the evidence behind each decision. Without it, sign-off stalls and the questions keep coming.

Then · the regulator

Up to €15M or 3% of turnover

Under EU AI Act Article 99, breaching high-risk obligations can mean fines of up to €15 million or 3% of global annual turnover, whichever is higher. High-risk obligations apply from 2 December 2027.

The problem

Most teams can’t show their AI governance on demand.

Auditors expect structured, versioned, signed-off evidence, not a folder of Word documents assembled under pressure.

Evidence scattered across systems

SharePoint, email chains, Confluence, IT tickets. When an audit lands, nobody knows where anything is or whether it is current.

One structured record per decision

Questions you can’t answer yet

Human oversight logs. Override records. Bias audit dates. Most teams find the gaps only after someone asks.

Guided questions surface gaps before review

Word documents aren’t evidence

No version history. No sign-off trail. No audit log. What looks like documentation is hard to defend.

Structured, versioned PDF with sign-off

How it works

From AI decision to signed-off evidence

A repeatable process your team can run without being compliance specialists.

01

Register the AI system

Name the system, set its risk tier and assign an owner.

02

Add the decision

Record the business decision it influences, the jurisdiction and the risk level.

03

Build the evidence pack

Answer guided questions for your framework and link supporting evidence.

04

Review and sign off

A nominated reviewer approves; name, role and timestamp go into the audit trail.

05

Export the PDF

One versioned PDF for internal audit, customers or regulators.

About the readiness score

Readiness measures how complete your evidence is against each framework’s questions. It is not a compliance certification. That judgement stays with your auditor or regulator.

What you get

A defensible record, not a slide deck.

Every pack exports as a single versioned PDF: a title page, a full accountability & attestation record, and the documented evidence behind every AI decision. This is what your auditors and customers receive.

Evidence pack title page: Meridian Financial Group, EU AI Act high-risk deployer
Document Control & Attestation page: accountability chain, formal attestation, and amendment history
Documented evidence section: question label, answer, and supporting detail

Illustrative sample: “Meridian Financial Group” is a fictional company shown for demonstration. Not a real client or real data.

Frameworks covered

What auditors look for. What your pack documents.

Evidence packs built around the documentation each framework expects.

EU AI Act
High-risk deployer obligations (Article 26)
OversightHuman oversight assigned to competent, trained people with authority to intervene
MonitoringThe system monitored in operation, with risks and incidents reported
LogsAutomatically generated logs kept and available for review
NoticesWorkers and affected people informed where AI is used in decisions about them
High-risk obligations apply from 2 December 2027 (confirmed under the EU Digital Omnibus)
NYC Local Law 144
Automated employment decision tools (AEDTs)
Bias auditIndependent audit within the 12 months before use
PublicationSummary of results published on your website
NoticesCandidates notified before the tool is used
AlternativeCandidates told how to request an alternative process
In effect for NYC hiring and promotion decisions
NIST AI RMF + ISO 42001
Risk management and AI management system
GovernPolicies, roles and organisational accountability
MapAI context, risk identification and categorisation
MeasureRisk analysis, testing and bias evaluation
ManageControls, incident response and continual improvement
Voluntary frameworks, no statutory deadline

Who builds it

Built by people who’ve sat through these audits

It comes out of 20+ years in global HR, payroll and enterprise compliance, the side of the table that gets the auditor’s questions and has to find the evidence.

Kept current

Templates that move with the regulation

When the rules change, we update the templates: the questions, the guidance, the deadlines. We did exactly that when the EU AI Act high-risk timetable moved in 2026.

Who it’s for

Built for the teams closest to AI decisions

Different functions, same need: evidence that holds up when someone asks.

HR & Talent
NYC Local Law 144 · EU AI Act

Evidence AI-assisted hiring decisions, bias audit dates and candidate notices.

Payroll & Finance
EU AI Act · ISO 42001

Document automated payroll and finance decisions, exception handling and human oversight.

Compliance & Risk
EU AI Act · NIST AI RMF

Keep a register of AI systems and the decisions they influence, with evidence ready before anyone asks.

IT & AI Teams
NIST AI RMF · ISO 42001

Own the system register: versions, risk tiers, vendors and review cadences.

Free resourcesEU AI Act: what to document →Article 14 human oversight, explained →90-second self-assessment →

Have the answer ready before the question lands.

See exactly what an auditor or customer would receive, then build your own.

EU AI Act · NIST AI RMF · ISO 42001 · NYC Local Law 144