Checks / Obligations / Log what the AI did
Obligation · 33 controls · 14 laws
Log what the AI did
Systems must automatically record what they did, keep the logs long enough and be able to trace any decision.
What to put in place
Turn on automatic logging for every AI decision and keep logs for the period the law requires.
Policy wording you can use
[your organisation] automatically logs the inputs, outputs and decisions of its AI systems, keeps those logs for at least the period the law requires, and can trace any decision back to its log.
Prove it once
Describe or link the evidence that this is in place: the policy, the page, the document reference. It is sealed once and applied to all 27 controls here that take a yes or a document (the rest need their own number or date and are listed after).
Every control that asks for this
EU AI Act
- EU AI Act Art.12 - automatic event logging enabled
- EU AI Act Art.12 - logs retained >= 180 days
- EU AI Act Art.18 - documentation kept 10 years
- EU AI Act Art.43 - conformity assessment recorded
- EU AI Act Art.19 - provider keeps logs >= 6 months
Agent output: compliance gates
- EU AI Act Art.12 - automatic logging enabled
- EU AI Act Art.19 - log retention >= 180 days
- EU AI Act Art.43 - conformity assessment recorded
- GDPR Art.30 - records of processing referenced
- NIST AI RMF MANAGE-4 - monitoring log
EN 18286:2026 (AI Act QMS)
- EN 18286 Art.17(1)(k) - record-keeping system
- EN 18286 Art.12 - automatic logging feeding QMS records
- EN 18286 Art.18 - QMS documentation kept >= 10 years
PCI DSS
- PCI DSS Req.10 - logging & audit trails
- PCI DSS Req.10 - daily log review
- PCI DSS Req.10 - time synchronisation
UK evidence and records law
- CJA 2003 s.117 - each record shows who supplied the information
- CJA 2003 s.129 - human inputs to the system are recorded
- Companies Act 2006 s.388 - accounting records kept >= 6 years
GDPR (UK and EU)
ISO/IEC 27001
FCA (UK)
EU Product Liability Directive
- PLD - automatic logs of what the AI did in use
- PLD - logs are tamper-evident and stand up as evidence