← Vetro Attest · Free Art. 12/14 checker · Free EU AI Act tools

EU AI Act for legal tech

*Engineering guidance, not legal advice. Your legal team decides how the Act applies to your products.*

Where this sector lands

Annex III point 8 covers AI systems intended to be used by or on behalf of a judicial authority to research and interpret facts and the law and to apply the law to facts, or used similarly in alternative dispute resolution. A drafting or research assistant used by a law firm is not automatically in scope; a system used on behalf of a court may be. Classification depends on intended purpose.

The logging duties that follow

• Art. 12 (providers of high-risk systems): automatic recording of events over the system's lifetime, so functioning can be traced and risks identified.
• Art. 19 (providers) and Art. 26(6) (deployers): keep the automatically generated logs for at least six months, unless other law says otherwise.

See Art. 12 logging and log retention. Logs cannot be backfilled: runs you do not record today will not exist when someone asks about them.

What counts as evidence

Lawyers face professional duties on supervision and confidentiality. A signed run record shows which sources the agent retrieved, what it produced and who reviewed it, without needing to trust a vendor dashboard. Be careful that logs of privileged material are themselves protected and retention-limited.

A log in your own database is your word. What convinces an outsider is a hash chain over the run's events, so edits and deletions are detectable, plus an independent signature verifiable with a public key.

How Vetro Attest fits

Vetro Attest accepts an OpenTelemetry GenAI trace (OTLP/JSON) or a native Vetro ledger, with nothing to install. Verification is free. For 29 USD per ledger, one-off:

• a full EU AI Act report (Markdown and HTML) mapping the run onto the logging obligations, with an explicit list of what the log cannot show;
• an ed25519 countersignature over the ledger digest, event count and timestamp, verifiable by anyone with our published public key.

Limits, stated plainly: the countersignature proves the log verified clean at a time, not that a decision was fair or the data correct. The report supports a compliance conversation; it is not a conformity assessment. Paid ledgers are deleted after 7 days, and the report and attestation are emailed to you to keep.

Next steps

• Run the free EU AI Act Art. 12/14 checker against your current setup.
• Verify a trace free, then get the countersigned report for 29 USD.
• Compare approaches: vs. WORM storage, vs. signing your own logs.

See a sample ledger verified in one click, check your own logs free or get the countersigned EU AI Act report.