Framework

Evidence framework

Audience

GC / CLOLegal OperationsRisk & Compliance

DEFINITION

Defensibility Element 3 of 5. The discipline of maintaining the Evidence Register — per AI system × per Risk Taxonomy 2026 class, the contemporaneous proof the function holds. The operational substrate of the entire Defensibility posture; addresses all 9 canonical Risk Taxonomy classes by design.

Detailed Explanation

Defensibility Element 3 (DE-3): Evidence Register Architecture (GOV-13)

Definition

DE-3 ensures that for every AI capability and every Risk Taxonomy 2026 class, the function maintains contemporaneous proof of control effectiveness and operational behaviour. For each risk-class × capability intersection, the Evidence Register records:

What evidence exists (artefact description and location)
Who holds it (accountable owner and system of record)
When it was last verified (timestamp, verifier, method)

Quick Facts

Term Type

Framework

Used in 3 modules

GOV-01

Defensible AI Governance Framework

Establish the governance structure, policy suite, and risk register that make Legal AI defensible to boards and regulators.

GOV-03

AI Risk Register

Apply the Risk Taxonomy 2026 to identify, score, and mitigate AI risks across nine canonical classes — the register that makes your governance defensible.

SUS-05

Annual AI Audit Methodology

The canonical annual governance audit instrument for deployed legal AI — validates compliance, bias, and performance across all active AI systems and produces the DPS annual evidence refresh.