Sample Audit Pack

Sample Audit Evidence Pack: What Each Export Shows

See what a complete audit evidence pack looks like before you sign up. Walk through each export type — certificates, reports, compliance matrices, and CSV exports — and understand when auditors ask for each one.

14-day free trialNo credit card requiredDownload real samples

Why your audit evidence format matters

Training records exist to be reviewed — by your quality team, by auditors, by regulatory bodies. The content of your records matters most, but the format and presentation also affect how auditors perceive your training program. Whether you are preparing for an ISO 13485 training records audit under clause 6.2 or an FDA QMSR inspection, the evidence requirements are similar: revision-specific, traceable, and immediately retrievable.

When an auditor asks for training evidence and you produce a well-structured PDF with clear data, consistent formatting, and complete information, it signals that your program is organized and your records are reliable. When you produce a hastily assembled spreadsheet with inconsistent columns and missing data, auditors tend to dig deeper — because the evidence itself raises questions about data quality. See our guide to replacing your SOP training spreadsheet for a detailed comparison.

A complete audit evidence pack should allow an auditor to work at any level of detail: a high-level SOP training matrix (compliance matrix) for the overview, document-level reports for specific procedures, individual certificates for specific personnel, and raw data exports for their own analysis. ApprovaDoc produces all five export types from the same underlying data.

The samples below show the exact format and content of each export type. They use fictional data (Acme Medical Devices, sample SOPs, sample employees) but are produced by the same export engine you would use with your own data.

Download sample exports

Download any or all sample exports to evaluate the format and content before signing up.

What each export contains and when auditors ask for it

Each export type serves a different purpose during an audit. Below is a detailed walkthrough of what each one contains, when auditors typically request it, and what it proves about your training program.

Acknowledgment certificate (PDF)

A single-page PDF certificate generated for each completed acknowledgment. The certificate shows the person's name, the document they acknowledged (including ID, title, and revision), the date and time of acknowledgment, quiz score if applicable, and electronic signature details for Part 11 workflows.

When auditors ask for it

Auditors request individual certificates when they want to verify a specific person's training on a specific document revision. This is the most granular proof — one certificate per person per document version. It is typically requested during targeted audits when an auditor selects a specific procedure and asks for proof that a specific employee was trained.

What it proves

  • The specific person acknowledged the specific document revision
  • The exact date and time of acknowledgment
  • Whether a comprehension check was completed and the score achieved
  • Electronic signature details (signer, meaning, timestamp) for Part 11 workflows
  • Document hash for integrity verification

Acknowledgment report (PDF)

A multi-page PDF report showing all acknowledgments for a specific document version. The report includes the document details (ID, title, revision, effective date), a summary of completion status, and a detailed table of every person assigned — showing their status, acknowledgment date, quiz score, and whether they are current, overdue, or pending.

When auditors ask for it

Auditors request this when they pick a specific SOP and ask: "Show me who has been trained on this document." The report gives a complete picture for one document across all assigned personnel. It is common during procedure-focused audits and when auditors want to verify that retraining happened after a revision change.

What it proves

  • Every person assigned to a document version and their training status
  • Who completed training and when, who is still pending, and who is overdue
  • Completion percentage for the document across the team
  • That the report references a specific revision — not just the document generally
  • Historical acknowledgment data for audit trail purposes

Compliance matrix (PDF)

A cross-reference matrix showing training status across all personnel and all documents. The matrix displays each person as a row and each document as a column (or vice versa), with cells showing the current training status — complete, overdue, pending, or not assigned. It gives a snapshot of the entire training program at a point in time.

When auditors ask for it

This is often the first thing auditors request. It gives them an overview of your entire training program in one view. They use it to identify gaps, spot patterns (e.g., one person overdue on many documents, or one document with low completion), and decide where to drill down. Having a clean, current compliance matrix ready to present immediately signals that your training program is organized.

What it proves

  • Organization-wide training status at a glance
  • Which personnel are current on all required training
  • Where gaps exist — overdue items, unassigned personnel, incomplete training
  • That training is tracked at the document revision level, not just document level
  • The overall health and maturity of your training program

Acknowledgments export (CSV)

A structured CSV file containing every acknowledgment record in your organization. Each row represents one acknowledgment and includes: person name, email, document ID, document title, revision number, assignment date, acknowledgment date, status, quiz score, and acknowledgment type. The CSV format allows auditors to filter, sort, and analyze the data in any spreadsheet tool.

When auditors ask for it

Auditors request the raw CSV when they want to perform their own analysis — filtering by date range, person, document, or status. It is also useful for large audits where the auditor needs to sample across many records rather than review individual certificates. The CSV is the most flexible export format and supports any analytical approach the auditor prefers.

What it proves

  • Complete, structured training data that can be independently analyzed
  • Every acknowledgment with full detail — not a summary or aggregation
  • Data consistency — every record has the same fields and format
  • That records are exportable on demand without manual preparation
  • Historical completeness — all acknowledgments, not just current ones

Compliance matrix export (CSV)

A CSV export of the compliance matrix data — the same cross-reference of personnel and documents, but in a format that can be imported into spreadsheets, databases, or other quality system tools. Each row represents a person-document combination with the current training status, relevant dates, and revision information.

When auditors ask for it

This is requested when auditors want the matrix data in a format they can manipulate — filtering for specific departments, date ranges, or document categories. It is also useful for quality teams who need to import training status data into other systems or generate custom reports beyond what the PDF matrix provides.

What it proves

  • The same data as the PDF compliance matrix, in a structured format
  • Training status for every person-document combination
  • That data can be exported and verified independently of the source system
  • Current status alongside historical data for trend analysis
  • Interoperability — data is not locked inside ApprovaDoc

Assembling your evidence pack before an audit

Most teams spend hours (sometimes days) assembling training evidence before an audit — pulling data from spreadsheets, searching email for acknowledgment confirmations, formatting reports manually, and checking for gaps. The more scattered your records, the more stressful audit preparation becomes. For teams still using manual methods, our guide to validating training record software explains what a regulated team should verify before trusting any tool's exports in an audit context.

With a purpose-built training evidence tool, the evidence pack is always ready. There is no assembly step because the data is already structured, the exports are already formatted, and the records are already complete. When an auditor asks for evidence, you generate the appropriate export and hand it over.

A practical approach to audit preparation:

  • Start with the compliance matrix. This gives you the overview. If any cells show overdue or missing training, address those gaps before the audit.
  • Review document-level reports for your most critical SOPs — the ones auditors are most likely to select. Verify completion status for high-risk procedures.
  • Spot-check individual certificates to verify they contain the detail level auditors expect: revision number, timestamp, quiz score, signature details.
  • Export the CSV data as a backup. Even if you present the formatted PDFs, having the raw data available shows transparency and allows auditors to perform their own analysis.
  • Review the audit trail for any unusual activity. The audit log is your independent verification that the records are trustworthy.

From SOP upload to a complete evidence pack

Every step in the workflow generates data that appears in your audit evidence exports.

1

Upload a controlled SOP or policy

Add the SOP or policy, document ID, and revision. Start as Draft.

2

Submit for review

Choose reviewers. They comment and approve or request changes.

3

Route through approval

Approvers sign off with e-signatures. Sequential phases ensure the right order.

4

Assign training

Choose the users, teams, or roles that need to acknowledge the effective version.

5

Collect acknowledgment by revision

With optional quiz to verify comprehension.

6

Reassign when a document changes

Release a new revision and trigger fresh review, approval, and acknowledgment.

7

Export clear evidence

View live status or download records for audits.

Features behind the evidence pack

Each feature produces structured data that flows into your audit exports.

Exportable evidence pack

Download audit-ready records with assignment, acknowledgment, and revision history.

Audit log

Maintain a clear history of review decisions, approvals, assignments, acknowledgments, and exports.

"Read & Understand" acknowledgment

Collect a clear record of acknowledgment tied to the exact revision assigned.

Training matrix and status view

See completion and overdue status by user, team, or document.

Optional comprehension quizzes

Attach multiple-choice questions to any document version. Users must pass before they can acknowledge.

Revision-triggered retraining

Release a new revision and reassign only where needed.

A note from the team

Built from real audit experience

ApprovaDoc comes from direct experience developing medical devices, navigating ISO 13485 and FDA audits, and working inside quality systems that ranged from excellent to barely functional. Training evidence deserves focused tooling — not a module buried inside an overbuilt system.

— the ApprovaDoc teamLearn why we built this →
Common questions

Audit evidence pack — common questions

An audit evidence pack is a collection of training records and exports that you present to auditors to demonstrate your training program compliance. It typically includes individual acknowledgment certificates, document-level reports, an organization-wide compliance matrix, and raw data exports. The pack should allow an auditor to verify training at any level of detail — from a high-level overview down to a specific person's acknowledgment of a specific document revision.
In ApprovaDoc, all exports are available on demand. You can generate and download any individual certificate, report, or matrix from the reports section in seconds. For a complete evidence pack covering all documents and personnel, the typical time is under five minutes — compared to the hours (or days) many teams spend assembling evidence from spreadsheets, email, and shared drives.
Yes. Each document version in ApprovaDoc is hash-verified with SHA-256 at upload. Acknowledgment certificates include the document hash, allowing auditors to verify that the document acknowledged is the same one that was uploaded. For Part 11 e-signature workflows, the HMAC binding provides cryptographic proof that the signature is tied to the specific record. The immutable audit trail provides an independent record of all activity.
The evidence itself is largely the same — revision-specific acknowledgments, training matrices, and audit trails. The difference is in emphasis. ISO 13485 auditors focus heavily on clause 6.2 training records and the connection between document control and training. FDA auditors under QMSR look at the same evidence through the lens of QMSR Subpart D and may also evaluate Part 11 compliance for electronic records. ApprovaDoc exports contain the information both audit types require.
All exports in ApprovaDoc are generated on demand from live data. You do not need to pre-generate or archive exports. If an auditor requests a specific report during an audit — training records for a specific person, a specific document, or a specific time period — you can generate it immediately. The data is always available; the export is just a presentation format.
The sample exports on this page use fictional data (sample company, sample employees, sample documents) but are generated by the same export engine that produces production exports. The format, structure, and level of detail are identical to what you would see with your own data. Download the samples to evaluate whether the format and content meet your audit evidence needs.

Audit-ready evidence, always available

Stop assembling training evidence manually. Every export is generated on demand from structured, immutable records.

Built for medtech startups Transparent pricing No demo required