← Vetro Attest · Free Art. 12/14 checker · Free EU AI Act tools

EU AI Act Article 73: serious incident reporting for AI agents

Article 73 requires providers of high-risk AI systems to report any serious incident to the market surveillance authorities of the Member State where it occurred. The report is due immediately after the provider establishes a causal link, or the reasonable likelihood of one, and in any event:

• no later than 15 days after becoming aware of the incident;
• no later than 2 days in case of a widespread infringement or a serious and irreversible disruption of critical infrastructure;
• no later than 10 days in case of the death of a person.

An initial, incomplete report is allowed, followed by a complete one. After reporting, the provider must investigate without delay, including a risk assessment and corrective action, and must not alter the AI system in a way that could affect the evaluation of the causes before informing the authorities.

Why the log decides your timeline

In the first hours you need to answer: which runs were affected, what the agent did in each, which rule should have stopped it and why it did not. If the answer requires engineers to reconstruct events from scattered application logs, two days is not much time.

The requirement not to alter the system before informing the authorities also applies in spirit to evidence. A log that can be edited invites the question of whether it was.

Prepare before the incident

• [ ] Every model call, tool call and policy decision recorded per run, with a run id
• [ ] Logs signed and hash-chained, so integrity can be shown to an authority
• [ ] A way to export the affected runs as a self-contained file anyone can verify
• [ ] A replay of the affected runs against the fixed version, to show the corrective action works
• [ ] Deployers know how to hand you their logs (see Article 26)

Check your own logs

Paste a Vetro ledger or an OpenTelemetry GenAI trace export into the free checker: it verifies integrity and shows which record-keeping obligations your evidence covers, in your browser. When you need something to hand to an auditor or a customer, the countersigned EU AI Act report costs 29 USD, one-off: an ed25519 counter-signature over your evidence plus a mapping to the articles, including an explicit list of what the log cannot show.

See a sample ledger verified in one click, check your own logs free or get the countersigned EU AI Act report.