← Vetro Attest · Free Art. 12/14 checker · Free EU AI Act tools

EU AI Act Article 26: what deployers of high-risk AI agents must do

Deployers of high-risk systems have their own obligations under Article 26. They must use the system according to its instructions, assign competent human oversight, ensure input data is relevant where they control it, monitor operation, inform the provider or authorities of risks and incidents, and keep the automatically generated logs for at least six months.

Checklist with evidence

Instructions followed: policy configuration versioned with the run. Oversight: recorded approvals and overrides. Monitoring: run history you can query. Incidents: a way to isolate the runs involved. Logs: retained and still verifiable.

The retention point

Six months is a floor, and sector law may require more. See our guide on Article 26 log retention.

Gaps to state honestly

Deployers often depend on the provider for the log format. Ask for logs you can verify yourself, not a dashboard export.

How Vetro helps

Vetro writes every model call, tool call and policy decision to a hash-chained, ed25519-signed ledger that anyone can verify with the public key. Vetro Attest verifies a ledger or OTLP GenAI trace for free and, for 49 USD, issues a counter-signed report mapping the evidence to the EU AI Act, including an explicit list of what the log cannot show. This is technical evidence, not legal advice.

See a sample ledger verified in one click, check your own logs free or get the countersigned EU AI Act report.