Evidence register
Minimum structure to keep an actionable record of age assurance decisions.
| Evidence | Why it matters | Frequency | Owner |
|---|---|---|---|
| Minor risk assessment | Show understanding of risks and proportionate measures. | Quarterly | Trust & Safety |
| Vendor due diligence | Evidence HEAA, privacy, security and accessibility evaluation. | Before contract then annually | Privacy / Procurement |
| Effectiveness tests | Measure bypasses, errors and user impact. | Monthly in production | Product / Data |
| DPIA and consent | Connect legal bases, minimization and user information. | Every major change | DPO / Legal |