← Vetro Attest · Free Art. 12/14 checker · Free EU AI Act tools

EU AI Act for automotive teams

*Engineering guidance, not legal advice. Your legal team decides how the Act applies to your products.*

Where this sector lands

Vehicles are a special case. Motor vehicle type-approval law sits in Annex I, Section B. For AI that is a safety component of such products, the Act does not apply its high-risk requirements directly: Article 2(2) limits it to Article 6(1), Articles 102 to 109 and Article 112. Those articles amend the type-approval framework so that AI Act requirements are taken into account when the implementing and delegated acts for vehicles are adopted. Driver-assistance and automated-driving functions will meet AI requirements through type approval, not through a separate AI Act conformity assessment.

Other automotive uses are ordinary AI Act territory:

• In-car voice assistants must disclose that they are AI where that is not obvious (Art. 50, from 2 August 2026).
• Fatigue and drowsiness detection is not emotion recognition: the recitals exclude physical states such as fatigue, citing systems that detect the fatigue of professional pilots or drivers to prevent accidents.
• Fleet driver scoring used by employers to monitor and evaluate drivers is high-risk under Annex III point 4(b).
• Dealer car finance for individuals involves creditworthiness assessment under point 5(b).

The logging duties that follow

For the Annex III uses (fleet monitoring, car finance):

• Art. 12 (providers): automatic recording of events.
• Art. 19 (providers): keep logs under your control for at least six months.
• Art. 26 (deployers), the fleet operator or dealer: competent human oversight (Art. 26(2)), logs kept for at least six months (Art. 26(6)), and for employers, informing workers' representatives and drivers before a monitoring system goes live (Art. 26(7)).

On timing: the Digital Omnibus agreement moves Annex III high-risk obligations to December 2027 (details and caveats).

What counts as evidence

A driver disciplined on the basis of a telematics score will contest the events behind it. The chain should show the raw events by reference, the score, and the manager's decision.

Abbreviated ledger excerpt (prev, hash and sig omitted):

{"seq":1,"type":"tool.result","data":{"name":"telematics_week","output":{"driver":"drv_2207","harsh_brakes":9,"speeding_events":3}}}
{"seq":2,"type":"tool.result","data":{"name":"safety_score","output":{"score":58,"prev":74,"model":"fleet-score-2"}}}
{"seq":3,"type":"policy.decision","data":{"kind":"tool.call","action":"block","hits":[{"rule":"no-sanction-without-manager"}]}}
{"seq":4,"type":"tool.call","data":{"name":"coaching_session","input":{"manager":"fm_11","outcome":"route_issue_confirmed"}}}

Recording the manager's finding keeps a route problem from becoming a driver's black mark.

How Vetro Attest fits

Vetro Attest accepts an OpenTelemetry GenAI trace (OTLP/JSON) or a native Vetro ledger, with nothing to install. Verification is free. For 49 USD per ledger, one-off:

• a full EU AI Act report (Markdown and HTML) mapping the run onto the logging obligations, with an explicit list of what the log cannot show;
• an ed25519 countersignature over the ledger digest, event count and timestamp, verifiable by anyone with our published public key.

A practical pattern: countersign weekly scoring runs per depot, and keep attestations with the driver file for the retention period agreed with worker representatives.

Limits, stated plainly: the countersignature proves the log verified clean at a time, not that the score was fair. The report supports a compliance conversation; it is not a conformity assessment. Paid ledgers are deleted after 7 days, and the report and attestation are emailed to you to keep.

Next steps

• Run the free EU AI Act Art. 12/14 checker against your current setup.
• Verify a trace free, then get the countersigned report for 49 USD.
• Compare approaches: vs. OpenTelemetry alone, vs. WORM storage.

See a sample ledger verified in one click, check your own logs free or get the countersigned EU AI Act report.