Evidence index
An internal compliance management document mapping each Annex IV technical documentation element to the specific document that satisfies it, including version number, approval date and approver, document location with direct link, last review date, and next scheduled review. The foundational tool of audit-ready evidence architecture; without it, the five-dimension assessment cannot be systematically prepared.
Defined in 4 GAGE programs, which carry 5 distinct definitions of it. The wording above is taught in EU AI Act Implementation Expert.
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
An internal compliance management document mapping each Annex IV technical documentation element to the specific document that satisfies it, including version number, approval date and approver, document location with direct link, last review date, and next scheduled review. The foundational tool of audit-ready evidence architecture; without it, the five-dimension assessment cannot be systematically prepared.
The dossier field, required at both the per-section and master level, listing the specific document (an anchor doc section, a verification file, a primary source page, or a contract clause) that lets a reviewer independently check each claim in the section.
A table listing each exhibit in a regulator response by letter, document name, date, and a one-line statement of what it proves and which request it answers. The organized spine of a defensible response.
The table supporting an effectiveness self-assessment, one row per claim, carrying evidence, location, period covered, owner and limitation.
a list of pointers, closing each major dossier section, to where supporting material actually lives, in the template's own four column shape (artifact, location, owner, last verified date), distinct from restating the field's own content.
Where it is taught
The exact lessons this term appears in. The first module of every program is free with a free account.
- Dossier Workshop A: System Description · The Agent, Deconstructed, Certified Agentic AI Governance Professional (CAAGP)
- Dossier Workshop J, Regulatory Exposure Statement · The Law and the Regulators, Certified Agentic AI Governance Professional (CAAGP)
- Answering a regulator's letter: responding with documents, not assurances, anchored to real enforcement patterns · The EU AI Act: The Executive Map, Certified AI Governance Professional (CAIGP)
- Program effectiveness: ISO 37301, Sentencing Guidelines, and DOJ expectations · Compliance Management Systems and Regulatory Intelligence, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- Audit Preparation: Facing the Notified Body · Capstone: The Compliance Portfolio, EU AI Act Implementation Expert
Where it shows up at work
A definition is where Evidence index starts. The lessons above teach it inside the competencies below, which are what job descriptions ask for and what the GAGE credential records. Every link here is drawn from the same careers map that builds a role's readiness check.
Builds and audits an AI management system: context, leadership, planning, support, operation, performance evaluation, improvement and the Annex A controls.
One lesson on this page teach it as a primary outcome.
Collects, labels and preserves the evidence that a control operated, a decision was made, and a claim can be defended to an auditor or regulator.
One lesson on this page teach it as a primary outcome.
Scopes an AI audit, sets criteria, samples, interviews, tests, writes findings with condition, criteria, cause, effect and recommendation, and tracks remediation.
One lesson on this page teach it as a primary outcome.
Roles that hire for it
Each role page shows the full competency set, what the seat decides, and a readiness check against your own evidence.
- Senior AI Compliance Analystneeds working knowledge
- AI Auditorneeds it at depth · 9 open postings this week
- AI Compliance Specialistneeds working knowledge · 1 open posting this week
- Security Compliance Managerneeds it at depth · 4 open postings this week
- GRC Associate (AI)needs it at depth
- Chief Audit Executive, AI audit editionneeds it at depth
How job descriptions say it
Postings rarely use the textbook word. These are the phrases the careers map reads as asking for the competencies above.
Where the frameworks place it: ISO/IEC 42001:2023; ISO/IEC 23894; ISO/IEC 42005; EU AI Act Articles 11 and 12.
One interview question about it
What does an ISO/IEC 42001 management system add that a set of policies does not, and how would you prepare for certification?
Asked of candidates for iso/iec 42001 management systems. Answering it in your own words is exactly how a GAGE topic is passed, and the credential records the pass where an employer can check it.
If you come from another field
Some backgrounds already carry this competency, and the readiness check gives credit for it.
- Compliance and regulatory affairs carries it as work you can show: Audit-ready documentation is what you produce.
- Internal audit and IT audit carries it as work you can show: Evidence evaluation is the profession.
- Project and program management carries it as a claim to back up: Decision logs and repositories are familiar.
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.