Article 12 — Record-Keeping
Article 12 requires high-risk AI systems to allow automatic recording of events (logs) over their lifetime, enabling traceability of system functioning throughout its lifecycle.
Art. 12(1)
Automatic recording of events (logs) over system lifetime
AI Attest itself is an event-sourced system — every action produces an immutable, hash-chained event. The engine’s own audit chain demonstrates the record-keeping pattern. Architecture and monitoring artifacts must document how the AI system implements logging.
Art. 12(2)
Logging must enable monitoring of system operation and post-market monitoring
The monitoring infrastructure section documents log collection, storage, and analysis capabilities. It must specify what events are logged, retention periods, and how logs feed into monitoring dashboards.
Art. 12(3)
Traceability appropriate to intended purpose
Architecture documents the system’s logging architecture. The deployment plan specifies logging configuration including what is logged, what is excluded (PII), and retention schedules.