Evidence of Compliance

Evidence of compliance is the documented, auditable proof that a governance control was in place and operating effectively at the time a requirement was in scope.

For AI agents, evidence includes audit logs, policy configurations, access review records, incident reports, and test results, collected and stored in a format that auditors can verify. Generating sufficient evidence is often the most time-consuming part of a compliance programme.

Closely related concepts include Governance Automation, Governance Event, Tool Registry, Agent Scope. Each is defined in the Prefactor glossary.