Sample evidence pack

See what your auditor gets

The first pages of the PDF report, and the first rows of the spreadsheet.

Open the sample PDF Download the sample spreadsheet

Sample data. Northwind Health is a made-up company, and every name is invented. The files: PDF, 859 KB; Excel, 102 KB; Word, 632 KB. The report is also a Word file.

Page 1 of the sample report, the cover. Q3 2026 user access review for Northwind Health, finalized and confirmed: every access has a decision. 512 accesses, 463 approved, 38 rejected, 11 changed. The dates, the pack code with a square code to scan, and the owner and the approver who confirmed the review. — **Cover.** The result, the totals, the dates, the pack code, and who confirmed the review. The names are typed in by an administrator.

The PDF report

32 pages for 512 accesses.

The cover, what was reviewed and every decision come first. The rest of the decisions follow, and a last section has the technical details for checking the pack. Select a page to see it full size.

Check this pack, as your auditor would

The cover has a pack code, H4ZQ-70NC-W8VD, and a square to scan. Open the check page, type the code, then pick the sample PDF to see it match.

Open the sample check page

Sample data.

Page 2 of the sample report, What was reviewed. A table of the three systems that were read, with when each was read and how many accesses it had, and a table of the five reviewers with how many accesses each was given and decided. — **What was reviewed.** Every system with the time it was read, and every reviewer with how many accesses they decided. The report says: “Acciew refuses to give a reviewer an access held under their own email address, or to take their decision on it. For 9 accesses the source gave no email address for the holder, so that could not be checked.”

Page 3 of the sample report, Every decision. A table with a row for each access: the person and their access, how they got it, who decided, the decision, when, and the reviewer’s note. — **Every decision.** Who decided what, and when, with the reviewer’s note. The list runs on for all of the accesses.

The spreadsheet

Every access, one row each.

The same 512 accesses as the report, with the system each is in, the decision, the note, and who decided and when.

The first twelve rows of the Register sheet of the sample spreadsheet, with some of its columns. Each row is one access, with the person, the system, the access, the decision, the reviewer’s note, who decided and when. Some are approved, two are rejected with a note, and one is changed. — Sample data. The first twelve rows of the Register sheet, with some of its columns. The file has more columns, a Decision history sheet of every decision made, a Summary sheet, and a Technical sheet.

For auditors

What is in a pack.

Two files to read, and the full record behind them.

The spreadsheet. Every access, one row each, with the system it is in, its decision, who decided and when. A second sheet lists every decision made, including the ones that were later changed.
The report, as PDF and Word. What was reviewed, by whom, the result, and who confirmed it.
The full record. It comes in the same download as the two files, and these samples leave it out. What was collected from each system, and every decision as it was made. A decision that is changed does not replace the earlier one: both stay.

Every pack has a code on its first page. Your auditor types it on Acciew’s check page to see what Acciew recorded, and can check the PDF there without uploading it. Try it with the sample PDF: the sample check page.

Access review coming up? Run it with us.

Design partners get the product early, help setting up their first review, and a say in what we build next.

Apply as a design partner Get the free template