Get information request evidence by ID
Retrieves a single evidence item attached to an information request by its ID.
This endpoint always includes soft-deleted evidence (where deletionDate !== null),
so an evidence ID surfaced by a changedSinceDate delta sync stays fetchable after
the evidence is deleted. Clients should check the deletionDate field to identify
and handle deleted records appropriately in their systems.
Evidence is only resolvable while its information request exists. Once the
request itself is deleted, this endpoint reports the request as not found —
matching GET /audits/{auditId}/information-requests/{requestId}/evidence.
Clients reconciling a deleted request should treat its evidence as gone with it.
Evidence that the customer has not shared with the auditor is reported as not found, rather than distinguishing it from an ID that does not exist.
Rate limit: 250 requests / minute.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Response
Ok
The unique identifier for the evidence within Vanta's system. Format: ObjectId as a string (e.g., "6890e473dce1da5d8406f5e7").
Type of evidence attached to this information request.
Determines the structure of the evidence field.
UPLOADED_DOCUMENT, OBSERVATION, LINK, VANTA_DOCUMENT, VANTA_POLICY, VANTA_TEST, VANTA_TEST_SNAPSHOT Timestamp when the evidence was created/uploaded. Format: ISO 8601 UTC timestamp.
Timestamp when the evidence was last modified. Format: ISO 8601 UTC timestamp.
The evidence content. Structure varies based on evidenceType.
- Option 1
- Option 2
- Option 3
- Option 4
- Option 5
- Option 6
- Option 7
Timestamp when the evidence was made visible to the auditor. Null if the customer has not yet shared this evidence with the auditor. Evidence must be shared before the auditor can review it. Format: ISO 8601 UTC timestamp.
Timestamp when the evidence was soft-deleted. Null if the evidence has not been deleted. Soft deletes retain evidence in the system for audit history while hiding it from normal operations. Format: ISO 8601 UTC timestamp.
Related topics
Get an information request by IDList evidence for an information requestInformation request evidence deletedInformation request evidence createdAccept evidence for an information request