In this act Annex I of 2
ANNEX I
Digital & dataLevel 2Delegated RegulationDSAIn forceOfficial source
TEMPLATE FOR THE AUDIT REPORT REFERRED TO IN ARTICLE 6
Table of contents

SECTION B: Auditing organisation(s) To complete the section below, insert as many lines as necessary per point. |
1. Name(s) of organisation(s) constituting the auditing organisation: ... 2. Information about the auditing team of the auditing organisation: For each member of the auditing team, provide: 1. their personal name; 2. the individual organisation, part of the auditing organisation, they are affiliated with; 3. their professional email address; 4. descriptions of their responsibilities and the work they undertook during the audit. ... 3. Auditors’ qualifications: ... a. Overview of the professional qualifications of the individuals who performed the audit, including domains of expertise, certifications, as applicable: ... b. Documents attesting that the auditing organisation fulfils the requirements laid down in Article 37(3), point (b) of Regulation (EU) 2022/2065 have been attached as an annex to this report: ... 4. Auditors’ independence: a. Declaration of interests: ... b. References to any standards relevant for the auditing team’s independence that the auditing organisation(s) adheres to: ... c. List of documents attesting that the auditing organisation complies with the obligations laid down in Article 37(3), points (a) and (c) of Regulation (EU) 2022/2065 attached as annexes to this report: ... 5. References to any auditing standards applied in the audit, as applicable: ... 6. References to any quality management standards the auditing organisation adheres to, as applicable: ... |






SECTION F.1: Third-parties consulted Repeat this section per third-party consulted, incrementing the name of the section by one (for example, F.1, F.2, and so forth). |
1. Name of third party consulted: ... 2. Representative and contact information of consulted third party: ... 3. Date(s) of consultation: ... 4. Input provided by third-party: ... |
| SECTION G: Any other information the auditing body wishes to include in the audit report (such as a description of possible inherent limitations). |
| Include as many lines as necessary in accordance with the allocation of responsibilities and empowerment as referred to in Article 7(1) point (b) | |
Date: ... | Signed by: ... |
Place: ... | In the name of: ... |
Responsible for: ... |
Annexes to the Audit Report (as applicable):
Documents requested pursuant to Article 7(2) of this Regulation.
Documents relating to the audit risk analysis pursuant to Article 9 of this Regulation.
Documents attesting that the auditing organisation complies with the obligations laid down in Article 37(3), point (a) of Regulation (EU) 2022/2065.
Documents attesting that the auditing organisation complies with the obligations laid down in Article 37(3), point (b) of Regulation (EU) 2022/2065.
Documents attesting that the auditing organisation complies with the obligations laid down in Article 37(3), point (c) of Regulation (EU) 2022/2065.
Documentation and results of any tests performed by the auditing organisation, including as regards algorithmic systems of the audited provider.
Codes of conduct referred to in Article 45 and 46 of Regulation (EU) 2022/2065 under which the audited provider made commitments, including a clear indication of any commitment undertaken and of any agreed key performance indicator for that commitment.
Crisis protocols referred to in Article 48 of Regulation (EU) 2022/2065 implemented by the audited provider.
Any other annex the auditing organisation wishes to include.