當證據真正被要求：台灣供應鏈、年報與確信如何判斷歷史紀錄能否採用

EIA-023 的全球命題是：企業保存了證據，不代表證據在被要求時就能回答特定機構的問題。紀錄可分為四個不可跳越的狀態：已保存、可調閱、可就明確用途受審查，以及由有權者就明確結論採用。這不是四級通用認證，也不是資料庫自動提高證據等級的功能。 台灣獨立解讀要回答更具體的交接問題。跨國買方詢問供應商是否完成訓練、上市櫃公司編製年報永續資訊、內稽追溯控制執行，以及確信者評估特定指標時，可能調出同一套舊紀錄，卻各有不同的母體、期間、權限、方法與充分性門檻。SNN.TW 以台灣正式規則和實際市場傳導重新組織判斷，保留本站責任編輯、雙語同頁和台灣來源鏈；全球 EIA-023 是研究起點，不是台灣法源。

The global EIA-023 thesis distinguishes four states: evidence preserved, retrievable, reviewable for a defined purpose, and relied upon by an authorised institution for a defined conclusion. A stored corporate record does not automatically answer the question later asked of it. These states are an editorial analytical framework, not four formal levels of certification or a platform's automatic promotion of evidence. The independent Taiwan question arises at a concrete handoff. An overseas buyer may ask whether named suppliers completed training; a listed issuer may prepare annual sustainability information; internal audit may reconstruct a control; and an assurance practitioner may evaluate one disclosed metric. Each may retrieve the same historical records, yet each applies a different population, period, mandate, method and sufficiency test. SNN.TW reconstructs the issue through Taiwan's operative instruments and market pathways, with its own editorial responsibility, same-page bilingual article and Taiwan evidence chain. The global article is the starting thesis, not a Taiwan legal instrument.

全球原稿提出 Institutional Evidence Usability 與 Use-Time Evidence Assessment 作為分析用語，研究紀錄在特定用途出現時是否可審。它們不是 IFRS、OECD、IAASB 或 ISO 頒布的共同證據採納準則。OECD 2026 年對大型上市公司公開資訊的研究指出，69% 揭露至少一項負責任商業行為承諾，只有 6% 揭露供應商監測結果。這衡量公開揭露落差，不能推斷未揭露者沒有執行，也不能推定台灣企業比率相同。OECD 盡職調查指引、GRI 2、IFRS S1、ISSA 5000、ISO 15489-1 與 W3C VC 2.0 分別涉及程序、治理、永續財務資訊、確信、紀錄管理及可驗證資料模型，目的與法律效力各異。 台灣的制度狀態另行核對。公司法及電子簽章法是各自適用條件下的現行法；金管會內控制度處理準則、年報應行記載事項準則及證交所上市公司永續報告書作業辦法，是各自對象和年度範圍內的正式規則。金管會 2026 年 1 月新聞稿說明當時分階段接軌時程；9 月公告調整方向，並表示年報準則及函令預計年底前檢討修正，因此公告不等於已完成修法。個人資料保護法 2025 年部分修正條文仍待行政院指定生效日，不可把未生效部分作為今日義務。歐盟 CSDDD 及其 2026 年修正須按歐盟適用及轉置時程解讀，不能直接變成所有台灣供應商的法定義務。

The source analysis uses Institutional Evidence Usability and Use-Time Evidence Assessment as research terms for assessing a record when a particular purpose emerges. Neither phrase is a common evidence acceptance standard issued by IFRS, OECD, IAASB or ISO. The OECD's 2026 study of publicly available information on large listed companies finds that 69% disclose at least one responsible business conduct commitment, while only 6% disclose the outcomes of supplier monitoring. Those percentages measure public disclosure, not proof that non-reporting firms failed to act, and cannot be imported as Taiwan company rates. OECD due diligence guidance, GRI 2, IFRS S1, ISSA 5000, ISO 15489-1 and W3C VC 2.0 address processes, governance, sustainability-related financial information, assurance, records and digital credential models respectively. Their status, purpose and legal effects differ. Taiwan's legal states require an instrument-by-instrument check. The Company Act and Electronic Signatures Act operate within their conditions. The FSC's rules on internal control and annual report particulars, and the TWSE rules on listed-company sustainability reports, are formal instruments for their respective entities and reporting years. The FSC's January 2026 release described its then staged IFRS transition. Its September release announced adjustments and said annual-report provisions and related orders were expected to be reviewed for amendment by year-end; it does not demonstrate that these amendments have been enacted. Some provisions of the 2025 Personal Data Protection Act amendments await an effective date designated by the Executive Yuan. The EU due diligence directive and its 2026 amendment need to be read under EU scope and transposition arrangements, not as a blanket Taiwan supplier statute.

假設一家台灣製造商在 2026 年保留供應商訓練簽到表，日後海外買方要證明指定供應商於合約期間完成指定課程。簽到表可證明某人可能參與，未必證明公司身分、課程版本、完成門檻、測驗結果及與買方指定供應商清冊一致。若買方改問風險改善，還須整改工作單、後續抽核與例外；若年報宣稱覆蓋率，財務及永續部門還需定義分母、合併邊界與報導期間。記錄存在、可被搜尋、可審查與足以支持結論，是不同判斷。 另一種情境是董事會批准減排政策。會議紀錄能支持決策曾發生，但不能單獨證明各廠執行、計量值正確、所有子公司納入或排放資訊已獲確信。電子簽章、雜湊或 W3C 可驗證憑證能幫助檢查文件與簽署關係，仍需確認原始事件、權限、方法及反證。歷史紀錄若取不到權利允許的附件、缺少版本或無法與當期母體相連，就只能如實列為有限證據或待查缺口。國際採購方應清楚看到台灣報導義務與私人契約要求的分界。

Suppose a Taiwan manufacturer retains attendance sheets for a supplier training programme held in 2026. Later an overseas buyer asks whether named suppliers completed a specified course during a contract period. The sheet may support attendance by certain individuals but may not resolve their company's identity, the version of the course, the completion threshold, assessment results or reconciliation to the buyer's supplier roster. A question about corrective outcomes requires remediation files, subsequent sampling and exceptions. A reported coverage rate also requires a defined denominator, group reporting boundary and period. Existence, retrieval, reviewability and support for the requested conclusion therefore require separate decisions. A board-approved emissions policy presents another divergence. The resolution supports that a decision occurred; it does not alone show implementation at each plant, accurate measurements, inclusion of subsidiaries or assurance of disclosed emissions. An electronic signature, hash or W3C verifiable credential may assist authentication of a document or signing relationship, while the underlying event, authority, method and counter-evidence still require examination. A historical record without rights to retrieve an attachment, a missing method edition or a broken link to the current population remains limited evidence or an explicit unresolved gap. An international buyer should see the distinction between a Taiwan filing obligation and a private contract request.

受控作法先從問題開始，而非先匯出整個資料庫。採購部門在回覆買方前，應保存原合約條款、所要求供應商及課程名單、當時課綱、出席與完訓規則，將身分重複、代簽、離職或未完成情形列成例外。紀錄保管人標明建立日期、來源、使用權、保留期限及可否對外提供。若請求只涉及某一採購批次，不應將其他客戶、員工個資與無關年份一併公開。 財務及永續團隊在編製年報或永續報告書前，應核對適用年度、報導個體、計算母體、方法版次、底稿與負責主管的核准紀錄。內部稽核依內控範圍抽查控制設計與實際執行、來源變更及缺失整改；法務核對正式條文與尚待修訂的公告，必要時也核對個資、營業秘密及資料使用權。董事會或授權者僅批准其職權內的對外語句，不能代替執業確信者的結論。確信人員按委任書和專業準則自行決定所需充分適切證據。對未回覆、異常或已過期紀錄，留下明確缺口和補件期限，不用補寫推測性成果。

Controlled work begins with the question, rather than with a bulk export of the repository. Before replying to a buyer, procurement should retain the original contractual clause, roster of requested suppliers and courses, syllabus as delivered, attendance and completion rules. Duplicate identities, proxy signatures, departures and incomplete cases belong in an exception list. The custodian records creation date, origin, use rights, retention terms and disclosure permissions. A request about one purchasing batch does not authorise exposure of unrelated clients, employees' personal data or other reporting periods. Before preparing an annual or sustainability report, finance and sustainability teams should reconcile the reporting year, legal entity and group perimeter, calculation population, method version, workpapers and responsible approval. Internal audit samples control design and performance, changes in data lineage and remediation of deficiencies within its mandate. Legal checks operative instruments separately from announcements awaiting amendment, as well as applicable privacy, trade-secret and data-use constraints. The board or delegated officer approves public statements within its authority but cannot substitute for an assurance practitioner's conclusion. An assurance practitioner independently determines sufficient appropriate evidence under the engagement and applicable professional requirements. Unanswered requests, anomalies and expired records remain identified gaps with a follow-up date, not invented outcomes.

本篇 Evidence Chain 列有 17 筆可核對的獨立外部資料：八筆台灣正式法規、交易所規則與主管機關公告或待生效法律狀態，九筆 OECD、IFRS、GRI、IAASB、ISO、W3C 及歐盟原始文件。全球.net EIA-023 是正典命題而不計入 17 筆；SNN.SG 區域解讀也不作台灣法源。每筆明示機構、文件、發布或修訂日、核驗日、可支持的範圍、狀態及限制。以同一機構的數份文件堆積數量，不能自動填補單一企業的事實缺口。 證據的用途也須逐條比對。OECD 的 69% 和 6% 僅支持公開揭露測量；IFRS S1 是全球準則，不替任何台灣實體完成適用判斷；ISSA 5000 規範確信執業程序，不代表某企業材料已受確信。ISO 15489-1 與 W3C 模型支持紀錄或資料結構設計，不鑑定敘述為真。歐盟修正文件支援歐盟制度狀態，不移轉台灣主管機關權限。台灣年報、內控及證交所正式條文支援特定報導人義務；金管會 9 月稿只支持公告與預計修訂；個資法待生效條款只能支持待修正狀態。

This Evidence Chain contains seventeen independently identifiable external records: eight Taiwan statutes, formal reporting rules and regulator announcements or pending-law states, plus nine primary OECD, IFRS, GRI, IAASB, ISO, W3C and EU materials. The.net EIA-023 canonical is the starting thesis and is excluded from the seventeen; a.sg regional interpretation is not a Taiwan legal source. Every entry retains its institution, document, publication or amendment date, verification date, support scope, state and limitation. Counting several documents from one institution cannot repair the missing facts of a particular firm. Claims must be tested against the actual scope of each document. OECD's 69% and 6% figures support public disclosure measurements only. IFRS S1 is a global standard and does not decide applicability for an individual Taiwan entity. ISSA 5000 addresses assurance engagements without assuring the company's own records. ISO 15489-1 and the W3C model support records or data architecture, not truth of a statement. EU amendment material supports the EU legal state without shifting a Taiwan regulator's competence. Taiwan's formal annual-report, internal-control and TWSE rules support duties only within their specified populations and periods. The FSC's September release supports an announcement and planned amendment; pending PDPA provisions support only that pending state. No source here validates an individual issuer's claimed outcomes.

歐盟盡職調查制度的適用與修正、全球永續揭露及確信準則的使用，會透過歐洲客戶的採購條款、供應商問卷、銀行授信與確信委任，形成台灣製造及上市櫃公司的取證請求。這種市場傳導不是歐盟法直接賦予每一家台灣供應商義務；應先辨識買方是否受歐盟制度約束、合約究竟要求何種佐證、涉及哪個台灣法人及哪段期間。出口零組件與紡織供應鏈的承包商、國際金融機構的借款人及上市櫃公司報導團隊，接到的問題可能相似，卻不能共享同一個自動結論。 對台灣資本市場，正式年報與永續報告書規則決定應申報內容及適用對象，內控程序決定誰設計和測試資訊控制。2026 年 9 月金管會公布接軌調整方向後，市場可先評估資料準備與過渡安排，但仍須核對後續正式修正是否發布及何時施行。銀行或買方的資料室可要求不同程度的證據，但商業請求不會變成台灣法定申報。供應商名冊若未涵蓋實際交易對象，『已培訓全部供應商』就需降為可證明範圍的敘述。這種限縮保護採購信任，也避免把數位保存成本誤認為確信或資產認列價值。

Changes in the EU due diligence regime and the use of global sustainability disclosure and assurance standards can flow through European buyers' procurement clauses, supplier questionnaires, bank credit files and assurance engagements into evidence requests faced by Taiwan manufacturers and listed issuers. This market transmission is not the EU law imposing a direct statutory duty on every Taiwan supplier. One must identify whether the buyer falls within the regime, precisely what the contract asks for, which Taiwan legal entity is involved and which period matters. Electronics and textile exporters, borrowers of international lenders and listed-company reporting teams may receive similar questions without sharing an automatically portable answer. Within Taiwan capital markets, formal annual-report and sustainability-report instruments determine the relevant reporting subject and scope. Internal-control rules allocate the design and testing of controls. After the FSC announced adjustments in September 2026, companies could examine data preparation and transitional plans, yet must check whether subsequent formal amendments were issued and when they take effect. A buyer's or bank's data room may demand its own evidence but does not become a Taiwan statutory filing. If the supplier roster excludes actual transactions, a statement that all suppliers completed training must be narrowed to the demonstrable population. Such a qualification protects procurement trust and keeps the cost of digital preservation distinct from an assured outcome or accounting asset recognition.

SNN 編輯與揭露前證據基礎設施觀點（SNN Editorial / Pre-Disclosure Evidence Infrastructure Perspective）。事實邊界：全球 EIA-023 提出在使用時檢驗證據適用性的研究模型，不是台灣新法、統一證據採納標準或對個別企業的認證。歐盟 2026 年修正盡職調查制度，全球 IFRS S1 與 ISSA 5000 有各自準則要求；台灣年報、內控及證交所正式規則另有適用主體。金管會 2026 年 9 月公告的接軌調整與預計修法，不能合併稱作已生效條文。 傳導機制：歐洲盡職調查制度的修訂與全球揭露、確信要求，透過海外買方合約、供應鏈問卷、銀行授信及確信委任，進入台灣製造與上市櫃企業的供應商清冊、控制底稿和報導工作；這是台灣市場須逐項評估的證據要求，不是全球規則自動變成台灣法。問題與用途 → 指定法人、廠址、期間和母體 → 來源與權限核對 → 例外和反證 → 有權者的有限結論，任何一步斷裂均須揭露限制。 有權角色與受控行動：在回覆海外買方前，採購部門應核對合約條款、供應商名冊與完訓紀錄，並保存未完成例外清單。在編製年報前，財務及永續團隊應核對報導個體、期間與指標計算底稿，留下方法版本及差異表。在主張法定要求前，法務部門應核對現行法規、金管會公告與待修正函令的生效狀態，留存法律狀態核對紀錄。在年度內控測試時，內部稽核應核對決議、實際執行及整改紀錄；董事會或授權主管核准對外語句，確信者僅就明示的委任範圍形成獨立結論。 禁止推論：保存不等於可調閱；可調閱不等於特定用途可審；可審不等於有權者已採用。訓練出席不等於完訓或供應商績效；董事會決議不等於各廠執行；數位憑證不等於底層事實為真；IFRS 參考不等於台灣實體合規；買方問卷不等於法定報導；金管會公告不等於修法完成；可重用來源不等於可重用揭露結論；外部技術與確信服務不移轉發行人責任。

SNN Editorial / Pre-Disclosure Evidence Infrastructure Perspective. This is an independent Taiwan editorial interpretation. Fact boundary: global EIA-023 proposes an analytical model for assessing evidence at its point of use. It is not a new Taiwan law, a universal acceptance standard or certification of a company. The EU amended its due diligence regime in 2026, while global IFRS S1 and ISSA 5000 have their own requirements; Taiwan's formal annual-report, internal-control and TWSE rules apply to separately defined subjects. The FSC's September 2026 adjustment announcement and contemplated amendments cannot be represented as the same already effective instrument. Transmission mechanism: amendments to the European due diligence regime and global disclosure and assurance requirements flow through overseas buyer contracts, supply-chain questionnaires, bank credit files and assurance mandates into supplier rosters, control workpapers and reporting by Taiwan manufacturers and listed companies. This is an evidence demand that Taiwan market participants must assess claim by claim, not the automatic conversion of a global rule into Taiwan law. A question and purpose lead to a specified entity, facility, period and population, then provenance and permissions, exceptions and counter-evidence, and finally a bounded conclusion by the authorised reviewer. A broken link must be recorded as a limitation. Authorised roles and controlled actions: before replying to an overseas buyer, the procurement team should reconcile contract clauses, the supplier roster and completion records, retaining an exception list. Before annual reporting, the finance and sustainability teams should reconcile the reporting perimeter, period and calculation workpapers, preserving method versions and discrepancies. Before asserting a statutory duty, the legal department should compare operative rules, the FSC announcement and any pending order, preserving a dated legal-state review record. During annual control testing, the internal audit team should sample board decisions, actual implementation and remediation records. A board or delegated officer approves public wording, while an assurance practitioner concludes independently only under an express engagement. Prohibited inference: preservation is not retrieval; retrieval is not purpose-specific reviewability; reviewability is not authorised reliance. Attendance is not training completion or supplier performance; a board resolution is not plant execution; a digital credential does not establish underlying truth; an IFRS reference does not mean Taiwan entity compliance; a buyer questionnaire is not a Taiwan statutory report; an FSC announcement is not a completed amendment; reusable sources are not reusable disclosure conclusions; a technology or assurance service does not transfer issuer responsibility.

下一個使用情境出現時，應重新核對舊證據與新問題的關係。課程換版、供應商更名或併購、合約範圍變更、報導期間更新、內控缺失改善、法律正式修訂及確信委任擴大，都可能改變過去紀錄的適用性。保留原版、更新版、差異、核准者及撤回原因，才能讓未來讀者分辨當時可知的事實與今日新判斷。不能取得的資料要列明保管單位、限制與補件路徑，而不是以時間戳或 AI 摘要補足。 本站維持自己的台灣 canonical、責任編輯、雙語同頁、台灣證據鏈與法律狀態；全球原文僅提供出發命題。日後來源更新與法律狀態升格都應有日期和人類授權編輯的可追溯決定。對國際採購方，最有用的回答不是『我們有很多紀錄』，而是能說明哪一份紀錄對哪個問題、哪段期間、哪個主體及哪種程度的結論有用，還有哪一環尚未證實。

When a new purpose arises, old records must be tested anew against the actual question. A changed curriculum, renamed or acquired supplier, altered contract scope, new reporting year, remediated control deficiency, enacted legal amendment or widened assurance mandate can change the suitability of historical material. Keeping the original and revised version, differences, approving actor and reason for withdrawal allows a later reader to distinguish what was knowable then from a current judgment. Missing material should be described by custodian, access restriction and permitted follow-up route. Neither a timestamp nor an AI summary can fill the factual gap. SNN.TW retains its own Taiwan canonical, responsible editor, same-page bilingual identity, local source chain and separate legal states. The global publication contributes the initial thesis. Later source updates or escalation of legal state require a dated, traceable decision by an authorised human editor. For an international procurement team, the useful answer is not merely that the company holds many records; it identifies which record can address which question, for which entity and period, at what level of conclusion, and which link remains unverified.