How do auditors verify that a digitized record is a complete and authentic copy of the original?

Auditors do not simply glance at a scan and call it a copy. They examine whether the digitization process was controlled enough to produce a reproduction that is complete, accurate, and trustworthy over time. The focus is on evidence: documentation that shows what was done, by whom, and how it was checked.

What “complete and authentic” means

A complete copy captures all the content of the original, including every page, attachment, annotation, and any context needed to understand it. An authentic copy is one that can be trusted to be what it claims to be, has not been altered, and is reliably linked to its source. Auditors look for both qualities, because a faithful image with no proof of integrity is hard to defend.

What auditors typically review

• Documented procedures. Written imaging policies, scanner settings, file format and resolution targets, and the steps for indexing and quality control.
• Quality control records. Evidence that images were inspected for legibility, correct page order, missing pages, skew, and color or tonal accuracy against defined targets.
• Metadata. Capture details such as the date scanned, operator or system identity, source description, and the technical characteristics of the file.
• Integrity controls. Use of checksums or hash values, fixity checks over time, access restrictions, and audit trails that record any handling or change.
• Chain of custody. A clear record linking the digital file back to the specific physical original it reproduces.

How verification is performed

Auditors usually sample records and compare the digital copy directly against the original (where it still exists), confirming nothing is missing or illegible. They re-run or review checksum and fixity checks to confirm files have not changed since capture. They trace audit logs to confirm who accessed or modified records. They also test whether the organization followed its own documented procedures consistently, since repeatable, governed processes are what make individual copies defensible.

When source originals have been destroyed after scanning, this evidence becomes especially important, because the digital record may be the only surviving version. Recognized guidance for imaging quality and for records authenticity helps auditors set the benchmark.

Learn more on the digitization and imaging topic hub.