← Vetro Attest · Free Art. 12/14 checker · Free EU AI Act tools

EU AI Act Article 17: quality management system evidence for AI agents

Article 17 obliges providers of high-risk AI systems to put a quality management system in place, documented as written policies, procedures and instructions. It covers, among other things, design and testing procedures, data management, risk management, post-market monitoring, incident reporting and record-keeping.

Where a ledger fits

The record-keeping and testing parts. Signed run ledgers with policy decisions and replayable runs give procedures something concrete to point at: this change was tested against these recorded runs.

Where it does not

Organisational items such as roles, resources, management accountability and supplier oversight are process, not telemetry.

Practical approach

Write the procedure, then name the artefact that proves it was followed: a verified ledger, a replay diff, a counter-signed report. Auditors follow the artefact.

How Vetro helps

Vetro writes every model call, tool call and policy decision to a hash-chained, ed25519-signed ledger that anyone can verify with the public key. Vetro Attest verifies a ledger or OTLP GenAI trace for free and, for 49 USD, issues a counter-signed report mapping the evidence to the EU AI Act, including an explicit list of what the log cannot show. This is technical evidence, not legal advice.

See a sample ledger verified in one click, check your own logs free or get the countersigned EU AI Act report.