An information processing system that manages information on legal approval for software configured to achieve a function of a device mounted in a vehicle and is configured to: associate a required device specification that is information on a specification required for the device in accordance with a regulation with a regulation ID that is information identifying the regulation defining a requirement for receiving legal approval for the vehicle, and store the required device specification in association with the regulation ID; acquire traceability information (20, 30) that is information on traceability of the device associated with the required device specification and includes a software ID identifying software embedded in the device; generate software query information in which the regulation ID associated with the required device specification associated with the acquired traceability information (20, 30) is associated with one or more software IDs; store event information on an event that has occurred in the device, the event information including information in which information identifying the device in which the event has occurred is associated with a software ID of the software configured to achieve the function of the device; identify, based on the software query information, a software ID of the one or more software IDs associated with the regulation ID associated with the software ID included in the event information; identify, based on the traceability information (20, 30), the device having embedded therein the software with the identified software ID; acquire communication data including a detail of communication executed between the identified device and another device; and generate, based on the communication data, evidence necessary to receive the legal approval. associate a required device specification that is information on a specification required for the device in accordance with a regulation with a regulation ID that is information identifying the regulation defining a requirement for receiving legal approval for the vehicle, and store the required device specification in association with the regulation ID; acquire traceability information (20, 30) that is information on traceability of the device associated with the required device specification and includes a software ID identifying software embedded in the device; generate software query information in which the regulation ID associated with the required device specification associated with the acquired traceability information (20, 30) is associated with one or more software IDs; store event information on an event that has occurred in the device, the event information including information in which information identifying the device in which the event has occurred is associated with a software ID of the software configured to achieve the function of the device; identify, based on the software query information, a software ID of the one or more software IDs associated with the regulation ID associated with the software ID included in the event information; identify, based on the traceability information (20, 30), the device having embedded therein the software with the identified software ID; acquire communication data including a detail of communication executed between the identified device and another device; and generate, based on the communication data, evidence necessary to receive the legal approval.