Build an evidence pack and share it with an auditor

An evidence pack is a fixed record of what your workspace had on file at a chosen moment, with the original documents behind it. It doesn't change when your records change later.

How do I generate a pack?

1. Choose the report

   In Reports, set the filters and the As at date you want. See See what you had on file on a past date.

2. Generate the pack

   Choose Generate evidence pack. The packs page opens and shows the pack as Queued, then Generating.

3. Wait for it to finish

   Vendarity builds the pack in the background, so you can leave the page. View generated evidence packs in Reports brings you back. The status becomes Complete or Incomplete.

4. Download the parts

   Part 1, Summary & manifest, holds the summary and the CSV files; the originals follow in further parts. Each part has its own download button and SHA-256 checksum: a fingerprint that shows the file hasn't changed since Vendarity built it.

What is in a pack?

• A PDF summary to start from.
• Document coverage at the chosen moment, as a CSV file.
• A list of every original file with its checksum.
• A snapshot of the underlying records and a short read-me.
• The original files themselves.

Internal notes and contact lists are left out; a pack is not a full account export. If an original can’t be included, the pack is marked Incomplete and the file list names what is missing. Including a file doesn't mean it was accepted, so check the document coverage file for decisions.

How long can I download it?

For 7 days after it finishes. After that it shows Expired; generate a new pack from the same report. While a pack is being built, Cancel generation stops it.

How do I share a pack with an auditor?

1. Open the sharing panel

   On the finished pack, choose Manage auditor access.

2. Enter the auditor’s details

   Type the Auditor email and choose the Invitation duration, from 1 to 7 days. Access ends no later than the pack’s own download window.

3. Approve what you share

   Tick the box approving that every part of the pack, including the original files, is shared with that address.

4. Create the link and send it

   Choose Create invitation link, then Copy invitation link, and send it to the auditor yourself. Vendarity doesn’t email the link.

The auditor opens the link, enters their email address and confirms a six-digit code sent to it. They can then view and download that pack only; they can’t browse your workspace.

The Access log shows when the auditor verified their email, viewed the pack and downloaded each part. To stop future downloads, choose Revoke access, then Confirm revocation. Copies already downloaded can’t be recalled.