[{"data":1,"prerenderedAt":135},["ShallowReactive",2],{"blog-post-en-\u002Fblog\u002Feu-ai-act-dora-evidence-packs":3,"i-mdi:book-search-outline":116,"i-mdi:scale-balance":120,"i-mdi:shield-lock-outline":122,"i-mdi:robot-outline":124,"i-mdi:linkedin":126,"i-mdi:twitter":128,"i-mdi:github":130,"i-circle-flags:lang-en":132},{"id":4,"title":5,"author":6,"body":7,"date":101,"description":102,"draft":103,"extension":104,"image":105,"meta":106,"navigation":107,"path":108,"seo":109,"stem":110,"tags":111,"__hash__":115},"blog_en\u002Fblog\u002Feu-ai-act-dora-evidence-packs.md","EU AI Act and DORA: what evidence packs actually look like","Minerva Data Solutions",{"type":8,"value":9,"toc":93},"minimark",[10,14,17,22,25,28,53,57,60,63,67,70],[11,12,13],"p",{},"For European financial and regulated organizations, AI compliance is becoming a runtime evidence problem. Policies matter, but auditors increasingly need proof that the system behaved correctly: logs, approvals, incidents, model changes, vendor dependencies, and human overrides.",[11,15,16],{},"The mistake is building one evidence process for the EU AI Act and another for DORA. The better pattern is one telemetry layer with different regulatory views.",[18,19,21],"h3",{"id":20},"where-the-obligations-overlap","Where the obligations overlap",[11,23,24],{},"The EU AI Act pushes teams toward risk management, technical documentation, operation logs, transparency, human oversight, quality management, and post-market monitoring. DORA pushes financial entities toward ICT risk management, incident reporting, resilience testing, third-party registers, and operational continuity.",[11,26,27],{},"The documents differ, but the evidence often comes from the same events:",[29,30,31,35,38,41,44,47,50],"ul",{},[32,33,34],"li",{},"Which AI system was used",[32,36,37],{},"Who triggered it",[32,39,40],{},"What business process it affected",[32,42,43],{},"Which data sources, tools, and vendors were involved",[32,45,46],{},"Which model and prompt versions ran",[32,48,49],{},"Whether a human reviewed, approved, rejected, or overrode the output",[32,51,52],{},"Whether an incident, drift signal, policy breach, or access violation occurred",[18,54,56],{"id":55},"the-evidence-pack-model","The evidence pack model",[11,58,59],{},"Think of an evidence pack as a regulator-ready bundle generated from live system telemetry. It should include an AI system registry entry, risk classification, data flow, model\u002Fprovider inventory, per-run logs, human oversight records, vendor dependencies, retention policy, and incident links.",[11,61,62],{},"For an AI Act view, expose technical documentation, operation logs, oversight evidence, and monitoring results. For a DORA view, expose ICT risk mapping, third-party concentration, incident forensics, resilience controls, and continuity impact.",[18,64,66],{"id":65},"what-to-avoid","What to avoid",[11,68,69],{},"Do not rely only on questionnaires or static policy docs. They are useful catalogs, but they do not prove runtime behavior. The evidence has to come from the AI system itself, from the moment it retrieves data, calls tools, generates output, and waits for human approval.",[11,71,72,73,80,81,86,87,92],{},"Further reading: ",[74,75,79],"a",{"href":76,"rel":77},"https:\u002F\u002Fwww.knowlee.ai\u002Fblog\u002Fai-compliance-banking-dora-ai-act",[78],"nofollow","AI compliance for banking where DORA meets the AI Act",", ",[74,82,85],{"href":83,"rel":84},"https:\u002F\u002Fwww.knowlee.ai\u002Fblog\u002Fai-audit-trail-implementation-guide",[78],"EU AI Act audit trail implementation guide",", and ",[74,88,91],{"href":89,"rel":90},"https:\u002F\u002Fwww.sphereinc.com\u002Fblogs\u002Fai-system-registry-regulator-ready",[78],"AI system registry guidance",".",{"title":94,"searchDepth":95,"depth":95,"links":96},"",2,[97,99,100],{"id":20,"depth":98,"text":21},3,{"id":55,"depth":98,"text":56},{"id":65,"depth":98,"text":66},"2026-05-24","Practical evidence structures for AI governance and operational resilience — not checkbox compliance theatre.",false,"md","\u002Fimg\u002Fog-image.png",{},true,"\u002Fblog\u002Feu-ai-act-dora-evidence-packs",{"title":5,"description":102},"blog\u002Feu-ai-act-dora-evidence-packs",[112,113,114],"EU AI Act","DORA","AI governance","lmCsdSdpQIckP-0XIX5hjfoZcD7pJ37-tl6WXlywG2g",{"left":117,"top":117,"width":118,"height":118,"rotate":117,"vFlip":103,"hFlip":103,"body":119},0,24,"\u003Cpath fill=\"currentColor\" d=\"M15.5 12c2.5 0 4.5 2 4.5 4.5c0 .88-.25 1.71-.69 2.4l3.08 3.1L21 23.39l-3.12-3.07c-.69.43-1.51.68-2.38.68c-2.5 0-4.5-2-4.5-4.5s2-4.5 4.5-4.5m0 2a2.5 2.5 0 0 0-2.5 2.5a2.5 2.5 0 0 0 2.5 2.5a2.5 2.5 0 0 0 2.5-2.5a2.5 2.5 0 0 0-2.5-2.5M13 4v8l-2.5-2.25L8 12V4H6v16h4c.54.81 1.23 1.5 2.03 2H6a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h12a2 2 0 0 1 2 2v7.81c-.58-.55-1.25-1-2-1.31V4z\"\u002F>",{"left":117,"top":117,"width":118,"height":118,"rotate":117,"vFlip":103,"hFlip":103,"body":121},"\u003Cpath fill=\"currentColor\" d=\"M12 3c-1.27 0-2.4.8-2.82 2H3v2h1.95L2 14c-.47 2 1 3 3.5 3s4.06-1 3.5-3L6.05 7h3.12c.33.85.98 1.5 1.83 1.83V20H2v2h20v-2h-9V8.82c.85-.32 1.5-.97 1.82-1.82h3.13L15 14c-.47 2 1 3 3.5 3s4.06-1 3.5-3l-2.95-7H21V5h-6.17C14.4 3.8 13.27 3 12 3m0 2a1 1 0 0 1 1 1a1 1 0 0 1-1 1a1 1 0 0 1-1-1a1 1 0 0 1 1-1m-6.5 5.25L7 14H4zm13 0L20 14h-3z\"\u002F>",{"left":117,"top":117,"width":118,"height":118,"rotate":117,"vFlip":103,"hFlip":103,"body":123},"\u003Cpath fill=\"currentColor\" d=\"M21 11c0 5.55-3.84 10.74-9 12c-5.16-1.26-9-6.45-9-12V5l9-4l9 4zm-9 10c3.75-1 7-5.46 7-9.78V6.3l-7-3.12L5 6.3v4.92C5 15.54 8.25 20 12 21m2.8-10V9.5C14.8 8.1 13.4 7 12 7S9.2 8.1 9.2 9.5V11c-.6 0-1.2.6-1.2 1.2v3.5c0 .7.6 1.3 1.2 1.3h5.5c.7 0 1.3-.6 1.3-1.2v-3.5c0-.7-.6-1.3-1.2-1.3m-1.3 0h-3V9.5c0-.8.7-1.3 1.5-1.3s1.5.5 1.5 1.3z\"\u002F>",{"left":117,"top":117,"width":118,"height":118,"rotate":117,"vFlip":103,"hFlip":103,"body":125},"\u003Cpath fill=\"currentColor\" d=\"M17.5 15.5c0 1.11-.89 2-2 2s-2-.89-2-2s.9-2 2-2s2 .9 2 2m-9-2c-1.1 0-2 .9-2 2s.9 2 2 2s2-.89 2-2s-.89-2-2-2M23 15v3c0 .55-.45 1-1 1h-1v1c0 1.11-.89 2-2 2H5a2 2 0 0 1-2-2v-1H2c-.55 0-1-.45-1-1v-3c0-.55.45-1 1-1h1c0-3.87 3.13-7 7-7h1V5.73c-.6-.34-1-.99-1-1.73c0-1.1.9-2 2-2s2 .9 2 2c0 .74-.4 1.39-1 1.73V7h1c3.87 0 7 3.13 7 7h1c.55 0 1 .45 1 1m-2 1h-2v-2c0-2.76-2.24-5-5-5h-4c-2.76 0-5 2.24-5 5v2H3v1h2v3h14v-3h2z\"\u002F>",{"left":117,"top":117,"width":118,"height":118,"rotate":117,"vFlip":103,"hFlip":103,"body":127},"\u003Cpath fill=\"currentColor\" d=\"M19 3a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2zm-.5 15.5v-5.3a3.26 3.26 0 0 0-3.26-3.26c-.85 0-1.84.52-2.32 1.3v-1.11h-2.79v8.37h2.79v-4.93c0-.77.62-1.4 1.39-1.4a1.4 1.4 0 0 1 1.4 1.4v4.93zM6.88 8.56a1.68 1.68 0 0 0 1.68-1.68c0-.93-.75-1.69-1.68-1.69a1.69 1.69 0 0 0-1.69 1.69c0 .93.76 1.68 1.69 1.68m1.39 9.94v-8.37H5.5v8.37z\"\u002F>",{"left":117,"top":117,"width":118,"height":118,"rotate":117,"vFlip":103,"hFlip":103,"body":129},"\u003Cpath fill=\"currentColor\" d=\"M22.46 6c-.77.35-1.6.58-2.46.69c.88-.53 1.56-1.37 1.88-2.38c-.83.5-1.75.85-2.72 1.05C18.37 4.5 17.26 4 16 4c-2.35 0-4.27 1.92-4.27 4.29c0 .34.04.67.11.98C8.28 9.09 5.11 7.38 3 4.79c-.37.63-.58 1.37-.58 2.15c0 1.49.75 2.81 1.91 3.56c-.71 0-1.37-.2-1.95-.5v.03c0 2.08 1.48 3.82 3.44 4.21a4.2 4.2 0 0 1-1.93.07a4.28 4.28 0 0 0 4 2.98a8.52 8.52 0 0 1-5.33 1.84q-.51 0-1.02-.06C3.44 20.29 5.7 21 8.12 21C16 21 20.33 14.46 20.33 8.79c0-.19 0-.37-.01-.56c.84-.6 1.56-1.36 2.14-2.23\"\u002F>",{"left":117,"top":117,"width":118,"height":118,"rotate":117,"vFlip":103,"hFlip":103,"body":131},"\u003Cpath fill=\"currentColor\" d=\"M12 2A10 10 0 0 0 2 12c0 4.42 2.87 8.17 6.84 9.5c.5.08.66-.23.66-.5v-1.69c-2.77.6-3.36-1.34-3.36-1.34c-.46-1.16-1.11-1.47-1.11-1.47c-.91-.62.07-.6.07-.6c1 .07 1.53 1.03 1.53 1.03c.87 1.52 2.34 1.07 2.91.83c.09-.65.35-1.09.63-1.34c-2.22-.25-4.55-1.11-4.55-4.92c0-1.11.38-2 1.03-2.71c-.1-.25-.45-1.29.1-2.64c0 0 .84-.27 2.75 1.02c.79-.22 1.65-.33 2.5-.33s1.71.11 2.5.33c1.91-1.29 2.75-1.02 2.75-1.02c.55 1.35.2 2.39.1 2.64c.65.71 1.03 1.6 1.03 2.71c0 3.82-2.34 4.66-4.57 4.91c.36.31.69.92.69 1.85V21c0 .27.16.59.67.5C19.14 20.16 22 16.42 22 12A10 10 0 0 0 12 2\"\u002F>",{"left":117,"top":117,"width":133,"height":133,"rotate":117,"vFlip":103,"hFlip":103,"body":134},512,"\u003Cmask id=\"SVGuywqVbel\">\u003Ccircle cx=\"256\" cy=\"256\" r=\"256\" fill=\"#fff\"\u002F>\u003C\u002Fmask>\u003Cg mask=\"url(#SVGuywqVbel)\">\u003Cpath fill=\"#eee\" d=\"m0 0l8 22l-8 23v23l32 54l-32 54v32l32 48l-32 48v32l32 54l-32 54v68l22-8l23 8h23l54-32l54 32h32l48-32l48 32h32l54-32l54 32h68l-8-22l8-23v-23l-32-54l32-54v-32l-32-48l32-48v-32l-32-54l32-54V0l-22 8l-23-8h-23l-54 32l-54-32h-32l-48 32l-48-32h-32l-54 32L68 0z\"\u002F>\u003Cpath fill=\"#0052b4\" d=\"M336 0v108L444 0Zm176 68L404 176h108zM0 176h108L0 68ZM68 0l108 108V0Zm108 512V404L68 512ZM0 444l108-108H0Zm512-108H404l108 108Zm-68 176L336 404v108z\"\u002F>\u003Cpath fill=\"#d80027\" d=\"M0 0v45l131 131h45zm208 0v208H0v96h208v208h96V304h208v-96H304V0zm259 0L336 131v45L512 0zM176 336L0 512h45l131-131zm160 0l176 176v-45L381 336z\"\u002F>\u003C\u002Fg>",1781544428026]