Step 1
Choose a non-sensitive sample with the same access configuration as the archive.
Practical review guide · Free worksheet
Test access to an evidence archive
Direct answerCheck that authorized reviewers can retrieve the relevant historical record and that unrelated users cannot. Test access with sample records and preserve a minimal result log.
Reviewed by ComplyFolio. Sellers and reviewers maintaining product evidence and preparing publication decisions.
Get the working templateReview procedure
These are suggested operational checks to apply to your own evidence. They are not additional legal requirements or claims that the workspace automates this entire task.
Step 2
Test authorized retrieval and a deliberately unauthorized access attempt.
Step 3
Verify that linked files, not just the index page, follow the intended permissions.
Step 4
Record failures and retest after the access owner applies corrections.
Worked example
An archive link works for its creator but fails for the colleague responsible for responding to product inquiries.
What the reviewer finds
- The index is readable but its attachments are not.
- An old sharing link bypasses the intended restriction.
Resulting record
An archive access test with permitted and denied outcomes.
Boundary: A sample access test cannot establish complete storage security or authorize broader sharing.
This scenario is fictional. It illustrates a review decision, not a customer outcome or a compliance determination.
Download the blank working record
The Markdown worksheet includes the procedure, the fields below, and space for findings, evidence, owners and retests. It contains no pre-approved findings. Edit it locally without an account.
- Sample reference
- Expected permission
- Observed access
- Attachment check
- Retest
Record what you observed, including unknowns. Link each decision to a source and keep unresolved questions assigned to an owner. Share completed records only through an appropriate authorized route.
Primary references and scope
The references provide the legal or technical context. The procedure and worksheet are ComplyFolio working suggestions, not official forms or a certification standard.
- GPSR — product safety, operator and distance-sale requirements (legal context)
- European Commission — product safety and business resources
A sample access test cannot establish complete storage security or authorize broader sharing.
Connect the review to your product record
Use the free workspace for an initial public product-page review, then add the manual evidence and decisions this guide requires. A page scan cannot inspect private supplier files or complete every user journey.
Start with a public product page