> ## Documentation Index > Fetch the complete documentation index at: https://developer.vanta.com/llms.txt > Use this file to discover all available pages before exploring further. # Get an audit evidence item by ID > Retrieves a single classic audit evidence item by its ID, scoped to its audit. The response matches the entry `GET /audits/{auditId}/evidence` returns for the same item, so an evidence ID surfaced by a webhook can be resolved directly instead of paging the audit's full evidence list. Soft-deleted evidence (where `deletionDate !== null`) is included in the response. Clients should check `deletionDate` to determine whether the item has been deleted. This matches `GET /audits/{auditId}/evidence`, which supports `changedSinceDate` and returns soft-deleted evidence for delta sync. As on the list endpoint, `description` is null for deleted items. Rate limit: 250 requests / minute. ## OpenAPI ````yaml https://spec.speakeasy.com/vanta/vanta/conduct-an-audit-with-code-samples get /audits/{auditId}/evidence/{auditEvidenceId} openapi: 3.0.0 info: title: Conduct an audit version: 1.0.0 description: >- The Auditor API lets audit firms conduct audits from a tool outside of Vanta. Unlock data syncing with Vanta through this API. **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)` from the server dropdown to issue requests against `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the commercial host — replace it with `https://api.vanta-gov.com/oauth/token`. termsOfService: https://www.vanta.com/terms license: name: UNLICENSED contact: name: API Support url: https://help.vanta.com/ email: support@vanta.com servers: - url: https://api.vanta.com/v1 description: Vanta (Commercial) - url: https://api.vanta-gov.com/v1 description: Vanta Gov (FedRAMP) security: [] paths: /audits/{auditId}/evidence/{auditEvidenceId}: get: tags: - Audits summary: Get an audit evidence item by ID description: >- Retrieves a single classic audit evidence item by its ID, scoped to its audit. The response matches the entry `GET /audits/{auditId}/evidence` returns for the same item, so an evidence ID surfaced by a webhook can be resolved directly instead of paging the audit's full evidence list. Soft-deleted evidence (where `deletionDate !== null`) is included in the response. Clients should check `deletionDate` to determine whether the item has been deleted. This matches `GET /audits/{auditId}/evidence`, which supports `changedSinceDate` and returns soft-deleted evidence for delta sync. As on the list endpoint, `description` is null for deleted items. Rate limit: 250 requests / minute. operationId: GetAuditEvidence parameters: - in: path name: auditId required: true schema: type: string - in: path name: auditEvidenceId required: true schema: type: string responses: '200': description: Ok content: application/json: schema: $ref: '#/components/schemas/Evidence' examples: Example 1: value: id: 65fc81a3359c8508c9af880f externalId: cG9saWN5OmFjY2Vzcy1jb250cm9sLXBvbGljeQo= status: Ready for audit statusUpdatedDate: '2024-03-07T21:25:56.000Z' name: Access Control Policy deletionDate: null creationDate: '2024-03-07T21:25:56.000Z' testStatus: null evidenceType: Policy evidenceId: access-control-policy relatedControls: - name: CRY-104 sectionNames: - Article 13 description: Access control policy accepted by all personnel security: - bearerAuth: [] x-codeSamples: - lang: java label: GetAuditEvidence source: >- package hello.world; import com.vanta.vanta_auditor_api.Vanta; import com.vanta.vanta_auditor_api.models.operations.GetAuditEvidenceResponse; import java.lang.Exception; public class Application { public static void main(String[] args) throws Exception { Vanta sdk = Vanta.builder() .bearerAuth(System.getenv().getOrDefault("BEARER_AUTH", "")) .build(); GetAuditEvidenceResponse res = sdk.audits().getAuditEvidence() .auditId("") .auditEvidenceId("") .call(); if (res.evidence().isPresent()) { System.out.println(res.evidence().get()); } } } components: schemas: Evidence: properties: id: type: string description: Vanta internal reference to evidence externalId: type: string description: This is a static UUID to map Audit Firm controls to Vanta controls status: $ref: '#/components/schemas/AuditEvidenceState' description: Vanta internal statuses for audit evidence name: type: string description: Mutable name for evidence. Not guaranteed to be unique. deletionDate: type: string format: date-time nullable: true description: The date this Audit Evidence was deleted creationDate: type: string format: date-time description: The date this Audit Evidence was created statusUpdatedDate: type: string format: date-time description: Point in time that status was last updated testStatus: type: string nullable: true description: The outcome of the automated test run, for Test-type evidence evidenceType: $ref: '#/components/schemas/AuditEvidenceType' description: The type of Audit Evidence evidenceId: type: string description: Unique identifier for evidence relatedControls: items: $ref: '#/components/schemas/EvidenceControl' type: array description: The controls associated to this evidence description: type: string nullable: true description: >- The description for the evidence. It will be set to null if the evidence is deleted required: - id - externalId - status - name - deletionDate - creationDate - statusUpdatedDate - testStatus - evidenceType - evidenceId - relatedControls - description type: object additionalProperties: false AuditEvidenceState: type: string enum: - Accepted - Flagged - Initialized - NA - Not ready for audit - Ready for audit AuditEvidenceType: type: string enum: - Evidence Request - Policy - Test EvidenceControl: properties: name: type: string description: Name of control associated to this evidence sectionNames: items: type: string type: array description: A list sections associated to the control required: - name - sectionNames type: object additionalProperties: false securitySchemes: bearerAuth: type: http scheme: bearer ```` ## Related topics - [Get an audit evidence comment by ID](/api-reference/audits/get-an-audit-evidence-comment-by-id.md) - [Get audit by ID](/api-reference/audits/get-audit-by-id.md) - [Evidence status changed](/api-reference/evidence/evidence-status-changed.md) - [Evidence comment created](/api-reference/evidence/evidence-comment-created.md) - [Evidence comment deleted](/api-reference/evidence/evidence-comment-deleted.md)