{"data":{"slug":"ai-system-technical-documentation","title":"AI System Technical Documentation","type":"kit","formats":["docx","xlsx"],"topics":["evidence","inventory"],"frameworks":["eu-ai-act","iso-42001"],"short":"The technical file a high-risk system needs: one section per element the recorded documentation duties name, with placeholders, plus a document register.","covers":{"categories":["technical_documentation","record_keeping","accuracy_robustness_security"]},"version":4,"dataset_version":"ef1018b7a6a2","generated_at":"2026-11-12T05:14:19+00:00","citations":22,"downloads":12,"files":[{"format":"docx","filename":"ai-system-technical-documentation-v4.docx","bytes":14475,"url":"https://aipolicytracker.org/templates/ai-system-technical-documentation#download"},{"format":"xlsx","filename":"ai-system-technical-documentation-v4.xlsx","bytes":19340,"url":"https://aipolicytracker.org/templates/ai-system-technical-documentation#download"}],"url":"https://aipolicytracker.org/templates/ai-system-technical-documentation","inside":["Document: general description, development process, data, monitoring, risk management, changes, standards, with placeholders","Register sheet: documents, versions, owners, last review","Duties sheet: every recorded documentation and record-keeping duty"],"legal_basis":["eu-ai-act","iso-42001"],"caveat":null,"covered_obligations":[{"slug":"us-california-ccpa-risk-assessment-submission","title":"Submit risk assessment information to the California Privacy Protection Agency each year","policy":"us-california-cppa-admt-regulations","source_reference":"Cal. Code Regs. tit. 11, § 7157","url":"https://aipolicytracker.org/obligations/us-california-ccpa-risk-assessment-submission"},{"slug":"us-colorado-admt-record-keeping","title":"Keep records of consequential decisions influenced by the technology for three years","policy":"us-colorado-automated-decision-making-technology-act","source_reference":null,"url":"https://aipolicytracker.org/obligations/us-colorado-admt-record-keeping"},{"slug":"us-colorado-admt-developer-documentation","title":"Developers must supply deployers with documentation of the technology","policy":"us-colorado-automated-decision-making-technology-act","source_reference":null,"url":"https://aipolicytracker.org/obligations/us-colorado-admt-developer-documentation"},{"slug":"eu-ai-act-technical-documentation","title":"Draw up technical documentation before placing a high-risk system on the market","policy":"eu-ai-act","source_reference":"Article 11 and Annex IV","url":"https://aipolicytracker.org/obligations/eu-ai-act-technical-documentation"},{"slug":"eu-ai-act-record-keeping","title":"Design high-risk systems to log events automatically","policy":"eu-ai-act","source_reference":"Article 12; Article 26(6) for deployers","url":"https://aipolicytracker.org/obligations/eu-ai-act-record-keeping"},{"slug":"eu-ai-act-accuracy-robustness-cybersecurity","title":"Achieve appropriate accuracy, robustness and cybersecurity","policy":"eu-ai-act","source_reference":"Article 15","url":"https://aipolicytracker.org/obligations/eu-ai-act-accuracy-robustness-cybersecurity"},{"slug":"eu-ai-act-art-18-documentation-keeping","title":"Providers must keep high-risk AI documentation for ten years","policy":"eu-ai-act","source_reference":"Article 18","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-18-documentation-keeping"},{"slug":"eu-ai-act-art-19-provider-log-retention","title":"Providers must retain automatically generated logs under their control","policy":"eu-ai-act","source_reference":"Article 19","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-19-provider-log-retention"},{"slug":"eu-ai-act-art-6-4-non-high-risk-assessment-documentation","title":"Providers must document and register a conclusion that an Annex III system is not high-risk","policy":"eu-ai-act","source_reference":"Article 6(4); Article 49(2)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-6-4-non-high-risk-assessment-documentation"},{"slug":"eu-ai-act-art-53-gpai-technical-and-downstream-documentation","title":"Providers of GPAI models must maintain technical documentation and inform downstream providers","policy":"eu-ai-act","source_reference":"Article 53(1)(a) and 53(1)(b); Annexes XI and XII","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-53-gpai-technical-and-downstream-documentation"},{"slug":"eu-ai-act-art-55-systemic-risk-cybersecurity","title":"Providers of systemic-risk GPAI models must secure the model and its infrastructure","policy":"eu-ai-act","source_reference":"Article 55(1)(d)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-55-systemic-risk-cybersecurity"},{"slug":"us-new-york-city-local-law-144-bias-audit","title":"Employers and employment agencies must obtain an independent bias audit before using an automated employment decision tool","policy":"us-new-york-city-local-law-144-automated-employment-decision-tools","source_reference":"NYC Administrative Code Section 20-871(a)(1); 6 RCNY Section 5-301","url":"https://aipolicytracker.org/obligations/us-new-york-city-local-law-144-bias-audit"}],"versions":[{"version":4,"generated_at":"2026-11-12T05:14:19+00:00","dataset_version":"ef1018b7a6a2","changelog":"Dataset 52bd836b1d6b → ef1018b7a6a2. Sheet \"Documentation duties\": 11 → 12 rows (+1). Record citations: 21 → 22.","stats":{"sheets":{"Document register":0,"Documentation duties":12},"blocks":85,"headings":20,"citations":22}},{"version":3,"generated_at":"2026-10-08T05:30:02+00:00","dataset_version":"52bd836b1d6b","changelog":"Dataset 3335c39da4b7 → 52bd836b1d6b.","stats":{"sheets":{"Document register":0,"Documentation duties":11},"blocks":85,"headings":20,"citations":21}},{"version":2,"generated_at":"2026-09-27T05:30:03+00:00","dataset_version":"3335c39da4b7","changelog":"Dataset 914895c3103e → 3335c39da4b7. Sheet \"Documentation duties\": 10 → 11 rows (+1). Document: 87 → 85 blocks. Record citations: 20 → 21.","stats":{"sheets":{"Document register":0,"Documentation duties":11},"blocks":85,"headings":20,"citations":21}},{"version":1,"generated_at":"2026-09-26T13:04:01+00:00","dataset_version":"914895c3103e","changelog":"First version, built from dataset 914895c3103e.","stats":{"sheets":{"Document register":0,"Documentation duties":10},"blocks":87,"headings":20,"citations":20}}]},"meta":{"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","disclaimer":"This template is generated from the records on aipolicytracker.org. It is an informational resource, not legal advice, and completing it does not make an organisation compliant with any law or standard. Every row that cites a duty links to the record it came from; check the official source before relying on it."}}