An audit trail is the evidence connecting a document to reality. For an invoice that means the chain running from the order or contract, through the delivery or completion of the work, to the invoice itself, and on to the payment that settled it — each step dated and traceable to the next.
European VAT rules use the phrase "reliable audit trail" as one of the accepted ways to establish authenticity of origin and integrity of content. In other words, ordinary business controls that connect an invoice to its supply can satisfy the requirement, without any cryptographic signature being involved.
Why It Matters
An invoice on its own proves only that an amount was billed. The audit trail proves what it was for, that it actually happened, and that it settled — which is what an auditor is really asking about. It is also the reason retention policies should cover contracts, delivery evidence and bank records rather than invoices alone: keeping the invoice and discarding its context leaves you holding the least useful part of the chain.
Example
A challenged invoice for €4,000 of consulting is supported by a signed statement of work, timesheets covering the period, the invoice referencing that statement of work by number, and a bank record showing the matching receipt. Each document points to the next, and the amount is traceable end to end.
Frequently Asked Questions
Does an audit trail have to be digital?
No. What matters is that the chain is complete, legible and available for the retention period. Digital records make it far easier to search and to back up, which is why most businesses end up there regardless.
Is an audit trail the same as an electronic signature?
No, though they serve an overlapping purpose. A signature establishes authenticity cryptographically; an audit trail establishes it through the coherence of the surrounding business records. VAT rules generally accept either.