Skip to main content
European Commission logo
AI Act Service Desk

AI Act Explorer

Recitals
Chapter I: General Provisions
Chapter II: Prohibited AI Practices
Chapter III: High-Risk AI Systems

Section 1: Classification of AI Systems as High-Risk

Section 2: Requirements for High-Risk AI Systems

Section 3: Obligations of Providers and Deployers of High-Risk AI Systems and Other Parties

Section 4: Notifying Authorities and Notified Bodies

Section 5: Standards, Conformity Assessment, Certificates, Registration

Chapter IV: Transparency Obligations for Providers and Deployers of Certain AI Systems
Chapter V: General-Purpose AI Models
Chapter VI: Measures in Support of Innovation
Chapter VII: Governance
Chapter VIII: EU Database for High-Risk AI Systems
Chapter IX: Post-Market Monitoring, Information Sharing and Market Surveillance

Section 1: Post-Market Monitoring

Section 2: Sharing of Information on Serious Incidents

Section 3: Enforcement

Section 4: Remedies

Section 5: Supervision, Investigation, Enforcement and Monitoring in Respect of Providers of General-Purpose AI Models

Chapter X: Codes of Conduct and Guidelines
Chapter XI: Delegation of Power and Committee Procedure
Chapter XII: Penalties
Chapter XIII: Final Provisions
Annexes
  • Chapter III: High-Risk AI Systems
  • Section 3: Obligations of Providers and Deployers of High-Risk AI Systems and Other Parties

Article 18: Documentation keeping

Summary

Providers of high-risk AI systems must retain technical documentation, quality management system records, change approvals, notified body decisions, and the EU declaration of conformity for 10 years after the AI system has been placed on the market or put into service. Conditions for documentation retention if a provider goes bankrupt or ceases activity are set by Member States. Financial institutions must maintain this documentation as part of their internal governance records under EU financial services law.

The summaries are meant to provide helpful explanation but are not legal binding.

1.   The provider shall, for a period ending 10 years after the high-risk AI system has been placed on the market or put into service, keep at the disposal of the national competent authorities:

(a)the technical documentation referred to in Article 11;
(b)the documentation concerning the quality management system referred to in Article 17;
(c)the documentation concerning the changes approved by notified bodies, where applicable;
(d)the decisions and other documents issued by the notified bodies, where applicable;
(e)the EU declaration of conformity referred to in Article 47.

2.   Each Member State shall determine conditions under which the documentation referred to in paragraph 1 remains at the disposal of the national competent authorities for the period indicated in that paragraph for the cases when a provider or its authorised representative established on its territory goes bankrupt or ceases its activity prior to the end of that period.

3.   Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the technical documentation as part of the documentation kept under the relevant Union financial services law.

Relevant recitals