Glossary · EU AI Act: high-risk AI
Record-keeping and logs (AI Act)
Also known as: Automatic logging (AI Act), Logs (AI Act), Record-keeping (AI Act)
German: Aufzeichnungspflichten (KI-Verordnung)
Under the EU AI Act, record-keeping is the requirement that high-risk AI systems technically allow the automatic recording of events (logs) over their lifetime, so that situations that may lead to risks or substantial modifications can be identified, post-market monitoring is facilitated and their operation can be monitored; providers and deployers keep the logs under their control.
- AI regulation
- EU
In one sentence
Record-keeping under the AI Act: high-risk AI systems must log events automatically; deployers keep their logs for at least six months.
Example
An AI-based dispatching system for a rail operator logs each recommendation, the data it used and the dispatcher’s decision; the operator keeps the logs for twelve months.
Explained in context
This term is a station of a mini course
- When an AI agent crosses the line: detect, contain and restore operationsStation: Preserve the evidenceStart the course
Context cards connect this term with others to answer one question. Also in British English and German.
- Reporting duties after an AI agent incident: AI Act, CRA, NIS 2 and GDPRWhen an AI agent has caused an incident, which EU reporting duties can apply — who reports, to whom, and by when?UKDeutsch
- When an AI agent crosses the line: detect, contain and restore operationsWhat has to be in place when an AI agent does something it isn’t allowed to do — in IT systems, IoT fleets, OT and on machines — and how is it detected, stopped and released again?UKDeutsch
How it applies
- Design requirement (Art. 12): The system must technically allow automatic logging of events relevant for identifying situations that may result in a risk or a substantial modification, for post-market monitoring and for monitoring its operation by the deployer.
- Keeping the logs: Providers keep the logs under their control (Art. 19); deployers keep the logs under their control for a period appropriate to the intended purpose, at least six months, unless other Union or national law provides otherwise (Art. 26(6)).
- When it applies: With the high-risk obligations — December 2, 2027 for Annex III systems and August 2, 2028 for Annex I Section A products, as set by the Digital Omnibus on AI.
- AI agents: An agent trace with tool calls and approvals is the practical form of these logs for agents. Mind data protection: logs often contain personal data.
- Machinery: For machinery with self-evolving behavior, the Machinery Regulation has its own recording duties (Annex III, 1.1.9 and 1.2.1), from January 20, 2027.