Hand off verifiable evidence to regulators and auditors.
Provide a package the external party can verify themselves, without having to take your word for it.
Why externally verifiable evidence matters
There are situations where "trust us, this is what we had at the time" is not enough. A CPS 230 attestation review, a regulator information request, a partner asking for binding evidence as part of a transaction or a customer-driven evidence request for material commercial reasons. The external party needs evidence they can rely on without trusting the source.
Aicura's Evidence Vault anchors evidence packs through public, independent timestamping services. The external party can verify that the evidence existed in its current form at the time it was anchored without having to trust Aicura. The package becomes verifiable on its own terms rather than only as far as Aicura's word goes.
Scope the evidence package with the external party
You agree with the external party what evidence is needed and what is relevant to their engagement. The AI Register snapshot as at a date, risk assessments for systems at a given threshold, current versions of the relevant policies, training compliance summary and closed incidents from a defined period. Scope it too narrow and you miss what the engagement needs. Scope it too broad and the package becomes noise.
Generate the pack and review it internally
Aicura assembles the pack from the agreed scope. You take it through internal review, with the appropriate signing authorities approving, typically the General Manager Risk and one other executive. The pack moves to a signed-off state ready for anchoring.
Anchor the pack externally
Aicura anchors the pack through public, independent timestamping services. From this point, the pack is immutable and externally verifiable. The external party can confirm the anchor directly, without needing to trust Aicura.
Share the pack under a time-limited grant
The external party receives a read-only access grant, scoped to the specific pack, time-limited to the engagement duration. Aicura keeps an audit trail of access. The external party can comment on specific items, ask for supplementary packs where necessary and reference the anchors in their own reporting back to whoever commissioned them.
After the engagement closes, the access grant expires but the pack remains in the Vault, immutable and verifiable indefinitely. If the same evidence is asked about again in a year or in five years, the original record is intact. The same workflow handles the next audit, the next regulator request, the next partner asking for confirmation. Verifiable evidence becomes a routine deliverable rather than a one-off scramble.
Frequently asked questions
What makes evidence verifiable to a regulator or auditor?
The external party can confirm for themselves that the evidence existed in its current form at the time it was anchored, without having to take your word for it or Aicura's. Aicura's Evidence Vault anchors evidence packs through public, independent timestamping services, so the package is verifiable on its own terms.
What goes into an evidence package?
Whatever you agree with the external party is relevant to their engagement, so the AI Register snapshot as at a date, risk assessments for systems at a given threshold, current versions of the relevant policies, a training compliance summary and closed incidents from a defined period. Scope it too narrow and you miss what the engagement needs, too broad and the package becomes noise.
What happens to the evidence after the engagement ends?
The access grant expires but the pack remains in the Vault, immutable and verifiable indefinitely. If the same evidence is asked about again in a year or in five years, the original record is intact and the same workflow handles the next audit or request.
Start the work in Aicura
Aicura supports this work from the register that anchors it through to the documents and records it produces, with your people reviewing and approving everything along the way. It is guidance, not certification, audit or legal advice.