Register, data-flow map, control matrix and exception log, generated from the record.
Evidence Packs generate the register, data-flow map, control matrix and exception log from the record, rather than assembling them by hand.
Audit evidence is usually assembled by hand, late, by the people with the least time.
Audit preparation is a project, and the pack is out of date before it is handed over.
of businesses using AI have security practices that cover it
DSIT, 2026The benefits of Evidence Packs.
The people who feel the problem first.
Hand over evidence without a project.
Show you are in control.
Answer diligence questions quickly.
Three ways teams use Evidence Packs.
Produce the pack for the period asked.
Show how AI is governed.
Answer the AI governance questions.
Works best alongside.
Controls mapped to ISO/IEC 42001, UK GDPR, DUAA, SOC 2, Cyber Essentials.
See Compliance Mapping LogLog: the record of events.
See Log Control MatrixWhich controls apply, where, and whether they are working.
See Control Matrix All of EvidenceA record of what AI saw, produced and who approved it, with reports against the regulations and your policies. Used with Guard.
See the Evidence modulePrices are indicative ranges, confirmed in writing before you commit. Estimates are replaced by your own figures once your health check runs.
How the supporting tools fit together
GenWA Frame brings together your policies, business knowledge and our methodology to guide the work.
The Log records what connected AI saw, produced and who approved it.
The Intelligence Layer is being built to turn those records into trends and answers linked to their source. We agree which tools are available and appropriate for your engagement.
Find out more about the GenWA FrameSee Evidence Packs working on your business.
Start with a health check. Agree the scope, fees and next steps with us.