Evidence Pack — Procurement & Insurer FAQ

What is a Veriscopic Evidence Pack?

An Evidence Pack is a cryptographically verifiable export of recorded governance evidence. It contains immutable records of document acceptance, governance events, and declared system information, packaged for independent scrutiny.

For a structural overview, see what an Evidence Pack includes.

What problem does it solve?

It reduces ambiguity during procurement, insurance underwriting, and due diligence by providing a deterministic, time-fixed snapshot of governance evidence rather than informal statements, attestations, or screenshots.

How can the Evidence Pack be verified?

Each Evidence Pack includes a SHA-256 hash derived from a canonical JSON representation of the evidence. Any reviewer can independently recompute this hash to confirm that the pack has not been altered since it was fixed in time.

Do reviewers need access to Veriscopic to verify a pack?

No. Verification can be performed offline using standard cryptographic tooling, or via Veriscopic’s public verification page.

Does an Evidence Pack certify compliance?

No. Evidence Packs do not constitute legal advice, compliance certification, or regulatory approval. They provide verifiable evidence that governance actions occurred, without asserting sufficiency or correctness.

Who is responsible for interpreting the evidence?

Interpretation remains the responsibility of the organisation, its legal advisors, auditors, insurers, procurement authorities, or regulators.

How does the Evidence Pack relate to the EU AI Act?

Evidence Packs may include declarative mappings showing how recorded governance artefacts relate to selected EU AI Act documentation and transparency expectations. These mappings are informational and non-binding.

See also EU AI Act governance evidence.

Does Veriscopic classify AI systems by risk?

No. Veriscopic records declared system information and governance actions. Risk classification and legal determination remain external responsibilities.

How do insurers typically use Evidence Packs?

Insurers may use Evidence Packs to understand governance maturity, accountability structures, and document acceptance history when assessing operational, technology, or AI-related risk.

Does the Evidence Pack reduce or guarantee insurability?

No guarantees are implied. Evidence Packs provide factual inputs to underwriting decisions but do not replace insurer evaluation.

Does the Evidence Pack include personal data?

Evidence Packs are designed to minimise personal data. Where identifiers appear, they are included solely for audit traceability and limited to what is necessary.

See Security & data handling.

Can Evidence Packs be shared externally?

Yes. Evidence Packs are exportable artefacts intended for controlled external sharing with procurement teams, insurers, auditors, and regulators.