Get an audit evidence item by ID
Retrieves a single classic audit evidence item by its ID, scoped to its
audit. The response matches the entry GET /audits/{auditId}/evidence
returns for the same item, so an evidence ID surfaced by a webhook can be
resolved directly instead of paging the audit’s full evidence list.
Soft-deleted evidence (where deletionDate !== null) is included in the
response. Clients should check deletionDate to determine whether the item
has been deleted. This matches GET /audits/{auditId}/evidence, which
supports changedSinceDate and returns soft-deleted evidence for delta
sync. As on the list endpoint, description is null for deleted items.
Rate limit: 250 requests / minute.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Response
Ok
Vanta internal reference to evidence
This is a static UUID to map Audit Firm controls to Vanta controls
Vanta internal statuses for audit evidence
Accepted, Flagged, Initialized, NA, Not ready for audit, Ready for audit Mutable name for evidence. Not guaranteed to be unique.
The date this Audit Evidence was deleted
The date this Audit Evidence was created
Point in time that status was last updated
The outcome of the automated test run, for Test-type evidence
The type of Audit Evidence
Evidence Request, Policy, Test Unique identifier for evidence
The controls associated to this evidence
The description for the evidence. It will be set to null if the evidence is deleted
Related topics
Get an audit evidence comment by IDGet audit by IDEvidence status changedEvidence comment createdEvidence comment deleted