How long do I have to keep AI logs?

Under the EU AI Act, providers and deployers of high-risk AI must keep automatically generated logs for at least six months (Articles 19 and 26), longer where other EU or national law requires. Providers must keep technical documentation and quality management system records for 10 years after the system is placed on the market (Article 18). Sector rules such as financial services record-keeping can require longer.

How it works

1. Logs: at least six months for high-risk systems.
2. Documentation and QMS records: 10 years from placing on the market.
3. Check your sector's own record-keeping rules, which may be longer.
4. A sealed record stays provable for as long as you keep it, because Bitcoin anchoring does not expire.