How do I prove provider keeps logs >= 6 months?

Record the field provider_log_retention_days in the decision or governance record and make sure it is a number of at least 180. sebbi.pro checks it and issues a tamper-evident receipt.

Checks / EU AI Act / provider keeps logs >= 6 months

EU AI Act · Art.19

EU AI Act Art.19 - provider keeps logs >= 6 months

Q: What does EU AI Act Art.19 - provider keeps logs >= 6 months require?

It asks you to show: provider keeps logs >= 6 months. The EU's law on artificial intelligence. High-risk systems must manage risk, keep logs, be transparent and stay under human oversight.

This control asks you to show: provider keeps logs >= 6 months. The EU's law on artificial intelligence. High-risk systems must manage risk, keep logs, be transparent and stay under human oversight.

What the law says: EU AI Act, Regulation (EU) 2024/1689 (official text) · Article 19 in plain English · Related hidden duties · Law graph (machine-readable)

What evidence passes

The check reads the field provider_log_retention_days in the decision or governance record. It passes when that field is a number of at least 180. Anything else fails, with the reason stated.

Check it now

Value of provider_log_retention_days

Free to run and see live. The sealed certificate comes with the sebbi engine, 50p a month.

Run it from your AI assistant

Connect https://sebbi.pro/mcp to Claude, ChatGPT, Cursor or any MCP app, then call:

sebbi_run_check {"check": "sebbi_euaiact_048", "record": {"provider_log_retention_days": "..."}}

Or run every EU AI Act control at once with sebbi_run_framework. How to connect

One piece of evidence, 32 more controls

This control is part of Log what the AI did. 32 other controls across 14 laws ask for the same thing: AI liability and damagesAgent output: compliance gatesConsumer Credit Directive 2 (AI)EN 18286:2026 (AI Act QMS)EU AI ActEU Product Liability DirectiveFCA (UK)GDPR (UK and EU)HIPAAISO/IEC 27001ISO/IEC 42001NIST AI RMFPCI DSSUK evidence and records law

Prove it once for all of them

If it fails: how to fix it

Put in place: Turn on automatic logging for every AI decision and keep logs for the period the law requires.

Record it: the field provider_log_retention_days, which passes when it is a number of at least 180.

{
 "record": {
  "provider_log_retention_days": 180
 }
}

Policy wording you can use:

[your organisation] automatically logs the inputs, outputs and decisions of its AI systems, keeps those logs for at least the period the law requires, and can trace any decision back to its log.

Keep it, hand it over, ask for it

My compliance file Ask a supplier to prove this