Article 12: Record-Keeping
Ensuring traceability and accountability through automated logging and detailed record-keeping for AI systems.
Requirements
Article 12 mandates that high-risk AI systems automatically generate logs throughout their lifecycle to ensure traceability of the system's functioning and performance.
Our Solution
SupraWall's Deterministic Audit Logs capture 100% of tool interactions, input/output pairs, and policy decisions, providing an immutable record that meets Article 12 standards out-of-the-box.
Technical Logging Requisites
Automatic Recording
Logging of events relative to the identification of situations that may result in the AI system presenting a risk.
Traceability & Forensics
Detailed timestamps and session identifiers to facilitate post-hoc analysis of autonomous actions.
Performance Monitoring
Continuous logging of system accuracy and reliability metrics to detect drift or failure.
Article 12 Compliance Checklist
- Start/End time of each system use
- The reference database used
- Input data for search criteria
- Traceability of human intervention
- Log retention management
- Secure logging verification
Frequently Asked Questions
What does EU AI Act Article 12 require for AI agents?+
Article 12 requires high-risk AI systems to automatically generate logs throughout their lifecycle. For AI agents, this means every tool call, decision, input, output, and policy evaluation must be recorded with timestamps and session identifiers to ensure full traceability.
How long must AI agent audit logs be retained under Article 12?+
Article 12 requires logs to be kept for a period appropriate to the intended purpose of the high-risk AI system, and at minimum for the duration required by applicable Union or national law. For most enterprises, this means at least 5 years of immutable log retention.
What information must be logged under Article 12?+
Logs must include: start and end time of each system use, the reference database used, input data that led to a match, identification of natural persons involved in verification, and any events that may indicate risks. SupraWall captures all of these automatically.
How does SupraWall implement Article 12 compliance?+
SupraWall's Deterministic Audit Logs capture 100% of agent tool interactions, including input parameters, output results, policy decisions (ALLOW/DENY/REQUIRE_APPROVAL), timestamps, and session context. Logs are immutable and exportable for regulatory review.
Can existing AI agents be made Article 12 compliant retroactively?+
Yes. SupraWall wraps existing agents with one line of code, immediately enabling comprehensive audit logging without changing agent logic. Retroactive compliance is achievable within hours for most LangChain, CrewAI, and AutoGen deployments.
Related Articles
AI Agent Audit Trail Logging
Complete guide to implementing immutable audit trails for AI agents.
EU AI Act Compliance for AI Agents
Full compliance guide covering Articles 9, 12, and 14.
Article 14: Human Oversight
Implementing human-in-the-loop controls for EU AI Act compliance.
EU AI Act August 2026 Deadline
What AI agent developers must do before August 2, 2026.
Compliance Automation
Configure your Article 12 audit pipeline in under 5 minutes.