# AI System Technical Documentation

- **Type**: Template (Kit)
- **Page**: https://aipolicytracker.org/templates/ai-system-technical-documentation
- **Formats**: DOCX and XLSX
- **Current version**: v4, built 2026-11-12

The technical file a high-risk system needs: one section per element the recorded documentation duties name, with placeholders, plus a document register.

## What is inside

- Document: general description, development process, data, monitoring, risk management, changes, standards, with placeholders
- Register sheet: documents, versions, owners, last review
- Duties sheet: every recorded documentation and record-keeping duty

## Laws and frameworks it is built from

- EU AI Act (European Union), Pending review · source-linked, checked 26 Sep 2026: https://aipolicytracker.org/policies/eu-ai-act

## Recorded duties it covers

- Submit risk assessment information to the California Privacy Protection Agency each year (California CPPA automated decision-making rules): https://aipolicytracker.org/obligations/us-california-ccpa-risk-assessment-submission
- Keep records of consequential decisions influenced by the technology for three years (Colorado ADMT law (SB 26-189)): https://aipolicytracker.org/obligations/us-colorado-admt-record-keeping
- Developers must supply deployers with documentation of the technology (Colorado ADMT law (SB 26-189)): https://aipolicytracker.org/obligations/us-colorado-admt-developer-documentation
- Draw up technical documentation before placing a high-risk system on the market (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-technical-documentation
- Design high-risk systems to log events automatically (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-record-keeping
- Achieve appropriate accuracy, robustness and cybersecurity (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-accuracy-robustness-cybersecurity
- Providers must keep high-risk AI documentation for ten years (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-18-documentation-keeping
- Providers must retain automatically generated logs under their control (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-19-provider-log-retention
- Providers must document and register a conclusion that an Annex III system is not high-risk (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-6-4-non-high-risk-assessment-documentation
- Providers of GPAI models must maintain technical documentation and inform downstream providers (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-53-gpai-technical-and-downstream-documentation
- Providers of systemic-risk GPAI models must secure the model and its infrastructure (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-55-systemic-risk-cybersecurity
- Employers and employment agencies must obtain an independent bias audit before using an automated employment decision tool (NYC Local Law 144 (automated employment decision tools)): https://aipolicytracker.org/obligations/us-new-york-city-local-law-144-bias-audit

## Latest changes

Dataset 52bd836b1d6b → ef1018b7a6a2. Sheet "Documentation duties": 11 → 12 rows (+1). Record citations: 21 → 22.

- **Retrieved**: 2026-11-12
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> Built from structured summaries of official texts. Not legal advice. A record whose review status is not "verified" has not been confirmed against its official source by a named reviewer; open the official source before relying on any date or duty. How records are verified: https://aipolicytracker.org/verification.