ReceiptDB by Counterfoil Labs

Sample report

EU AI Act · Art. 12 record-keeping

What ReceiptDB Enterprise writes for a period: every answer with its provenance, the ones that lost their basis, and the lifecycle events behind them.

Generated by ReceiptDB Enterprise's receipt-ee report --framework ai-act from a sample deployment: a fictional bank's credit-operations assistant over Q1 2026 (creditworthiness is an Annex III area): seven answers, a superseded lending policy, third-party commentary restricted, an out-of-date rate sheet quarantined, and a loan applicant's erasure. The event log's hash chain is verified in section 5. Unedited, apart from the layout.

EU AI Act record-keeping report (Art. 12)

System: Credit-operations assistant (sample) · Provider/deployer: Acme Bank (fictional)
Period: 2026-01-01T00:00:00+00:00 to 2026-04-01T00:00:00+00:00 · Generated: 2026-10-12T20:21:36.182127+00:00

This report is generated from ReceiptDB's records to support record-keeping obligations. It is not legal advice and not a conformity assessment.
This report names the people and keys that used the system (who asked each question, who placed or released a hold): the operator's own accountability record. Share it accordingly; a data subject's erasure certificate names no one else.

1. Outputs recorded

  • 7 answers were recorded with full provenance (inputs, sources, model, asker, time).
  • 4 of them are no longer valid, because a source was retracted, superseded or erased since.
  • 1 relied on low-trust content, 0 on non-commercial or restricted content, and 1 involved personal data.

By model or agent version

TransformAnswers
agent:credit-assist@claude-opus-55
agent:credit-assist@claude-sonnet-52

By requester

UserAnswers
l.fischer@bank.example3
a.dubois@bank.example2
s.romano@bank.example1
(erased)1

2. Input data

  • 7 sources were ingested in the period.
Most-used sourceAnswers citing it
sharepoint://credit/lending-policy3
sharepoint://credit/underwriting-notes2
web://blog/lending-trends1
hmac1:2fb673616e8de74dc72105b57b7b07aad6448856e3564ab402972a1c448530bf1
hmac1:97efcf86215cf8e8629ad5cfc1bd629f1dbc25ce6a07aedbc3f28ca4fa0eba1b1
sharepoint://credit/rate-sheet-q11
sharepoint://compliance/kyc-procedure1

3. Outputs invalidated in the period

Outputs whose inputs were later retracted, superseded, erased or quarantined.

WhenAsked byQuestionStatusReason
2026-03-02T09:05:00a.dubois@bank.exampleWhat's the current personal loan rate?quarantinedquarantine: rates changed on 1 March: out of date
2026-03-04T08:30:00l.fischer@bank.exampleWhat's the maximum debt-to-income for a personal loan?supersededthe March 2026 lending policy
2026-03-04T08:30:00s.romano@bank.exampleCan we go above 40% DTI for a strong applicant?supersededthe March 2026 lending policy
2026-03-18T17:45:00erasedGDPR Art. 17 request #418

4. Data lifecycle events

  • Retractions: 0 · Supersessions: 1 · Access changes: 1 · Erasures: 1 · Quarantines: 1 (released: 0) · Model cutovers: 0

Retractions

None in this period.

Access changes

SourceReasonRecords recomputed
web://blog/lending-trendsthird-party commentary, not for lending decisions3

Erasures

ScopeReasonRecords erased
subject_hash=hmac1:be295b7caa277402e39f883da3a5aceb119d72bfdadb7fde53197f5cf18bfe38GDPR Art. 17 request #4184

5. Integrity and retention

  • Event log hash chain verified (32 events).
  • Logs must be kept for a period appropriate to the intended purpose, and at least six months for deployers (Art. 26(6)); providers keep logs under their control (Art. 19). Configure receipt retention accordingly.

Want one from your own deployment? Request a demo.