Article 18: Documentation keeping
Providers of high-risk AI systems must retain technical documentation, quality management system records, change approvals, notified body decisions, and the EU declaration of conformity for 10 years after the AI system has been placed on the market or put into service. Conditions for documentation retention if a provider goes bankrupt or ceases activity are set by Member States. Financial institutions must maintain this documentation as part of their internal governance records under EU financial services law.
1. The provider shall, for a period ending 10 years after the high-risk AI system has been placed on the market or put into service, keep at the disposal of the national competent authorities:
2. Each Member State shall determine conditions under which the documentation referred to in paragraph 1 remains at the disposal of the national competent authorities for the period indicated in that paragraph for the cases when a provider or its authorised representative established on its territory goes bankrupt or ceases its activity prior to the end of that period.
3. Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the technical documentation as part of the documentation kept under the relevant Union financial services law.