ProcedureReady to Usev2.0
Logging & Traceability Procedure
Procedure for implementing Article 12 compliant automatic logging capabilities with minimum 6-month log retention (Art. 19(1)) for high-risk AI systems.
35 min
Read Time
Intermediate
Level
Topics:Automatic logging6-month minimum retentionArticle 12 complianceAudit trailsLog integrity
PROC-AI-LOG-001
AI Logging Procedure
STD-AI-003: AI Logging and Traceability Standard
Controls Covered
LOG-001LOG-002LOG-003LOG-004LOG-005
Effective Date
[To be filled]
Next Review
[To be filled]
Purpose & Scope
Purpose
This procedure establishes the step-by-step process for implementing automated logging infrastructure that records AI system operations, decisions, and events to enable traceability, monitoring, investigation support, and regulatory compliance with EU AI Act Articles 12 and 19.
Applies To
- All high-risk AI systems as classified per AI System Classification Standard (STD-AI-001)
- All AI systems that make decisions affecting individuals
- All AI systems that process personal data
- All AI system operational environments (development, testing, production)
Does Not Apply To
- Minimal-risk AI systems (unless specifically required)
- Pre-production development environments without access to real data
- Third-party AI systems where logging is provider-managed (covered by AI Vendor Management Procedure (PROC-AI-VENDOR-001))
AI LOGGING SYSTEM FRAMEWORK
1
LOG INSTRUMENTATION & GENERATION
Application-Level Logging
Model Inference Logging
System Event Logging
Audit Trail Logging
2
LOG COLLECTION & AGGREGATION
Log Collection Agents
Log Parsing & Normalization
Log Enrichment & Correlation
Real-Time Log Streaming
3
LOG STORAGE & RETENTION
Short-Term Hot Storage (0-90 days)
Medium-Term Warm Storage (90 days - 2 years)
Archival Storage (if retention extended)
Tamper-Evident Storage
4
LOG SECURITY & ACCESS CONTROL
Encryption (in-transit and at-rest)
Integrity Protection (hashing, signatures)
Role-Based Access Control
Access Audit Logging
5
LOG ANALYSIS & MONITORING
Real-Time Monitoring Dashboards
Automated Anomaly Detection
Investigation Query Tools
Regulatory Reporting
13
Procedure Steps
7
Roles Defined