Review category ? Choose the review category this evidence item helps answer. Each item should be attached to exactly one category. Category 1: Workflow Scope & AI Use Category 2: Authorization & Limits Category 3: Evaluation & Readiness Category 4: Operational Monitoring & Change Control Category 5: Failure Handling & Escalation
Category 1
Workflow Scope & AI Use What workflow are we reviewing, and where does AI appear in it?
Helpful evidence may include...
workflow description process map system diagram data-flow note AI tool/vendor/model list product screenshots prompt or instruction summary retrieval/source description user roles customer-facing description architecture notes dependency list launch or rollout notes Evidence type ? Choose the evidence type that best describes what this item helps prove for the selected review category. Workflow Description System Diagram Ai Vendor Model Tool List Data Flow Note User Roles Customer Facing Claim Other
Evidence format ? Choose how reviewers should access this item: upload a private file, link to a client-controlled source, answer in text, or describe evidence that cannot be transferred. Uploaded file External link Written answer No-transfer / describe-only note
Upload file Allowed in v0: PDF, DOCX, XLSX, CSV, TXT, Markdown, PNG, JPG. Demo uploads start pending scan. Sensitivity ? Use Restricted for material with tighter access limits or sensitive customer/internal details. Use Confidential for ordinary non-public evidence. Use Low sensitivity only when the item is safe to treat as low sensitivity. Low sensitivity Confidential Restricted
Evidence owner ? Name the team or person this evidence should be associated with in the client-facing report. Use the person who can explain the context, not direct contact details.
Evidence date ? Use the date the evidence was created, approved, tested, or last materially updated.
Current status note ? Explain whether the evidence is current, partial, superseded, time-bound, or awaiting an update.
Source system ? Name where the evidence comes from, such as Notion, Jira, GitHub, Drive, a dashboard, or a policy repository.
Notes ? Add optional context that will help reviewers interpret the item without changing the evidence itself.