Record-Keeping & Documentation
Requirement to maintain records of AI system development, deployment decisions, and operational logs sufficient for regulatory review.
What Counts
- Technical documentation requirements
- Decision-making audit trails
- Training data documentation
- Deployment and usage logging
- Record retention requirements
What Does Not Count
- General business recordkeeping without AI-specific requirements
- Documentation without regulatory access provisions
- Voluntary best-practice documentation
Related Terms
- Audit trail
- Documentation
- Logging
- Technical documentation
Implementing Regulations
| Regulation | Jurisdiction | Status | Provisions |
|---|---|---|---|
| California Employment Regulations Regarding Automated-Decision Systems | California | enforcing | 1 |
| Provisions on the Management of Deep Synthesis | China | enforcing | 1 |
| Framework Convention on AI, Human Rights, Democracy and Rule of Law (CETS 225) | Council of Europe | enacted | 1 |
| EU AI Act | European Union | phased enforcement | 1 |
| Digital Operational Resilience Act (DORA) | European Union | enforcing | 1 |
| IT (Intermediary Guidelines) Amendment Rules 2026 — Synthetic Media | India | enforcing | 1 |
| Law on Artificial Intelligence | Kazakhstan | enforcing | 1 |
Standards & Frameworks
Voluntary standards that address this obligation. Implementing these can help demonstrate compliance with the binding regulations above.
| Standard | Type | Status | Provisions |
|---|---|---|---|
| General-Purpose AI Code of Practice (GPAI CoP) | framework | enforcing | 1 |
| Hiroshima AI Process – Principles & Code of Conduct | framework | voluntary | 1 |
| ISO/IEC 42001 AI Management System | standard | voluntary | 1 |