Generated by ReceiptDB Enterprise's receipt-ee report --framework ai-act from a sample deployment: a fictional bank's credit-operations assistant over Q1 2026 (creditworthiness is an Annex III area): seven answers, a superseded lending policy, third-party commentary restricted, an out-of-date rate sheet quarantined, and a loan applicant's erasure. The event log's hash chain is verified in section 5. Unedited, apart from the layout.
EU AI Act record-keeping report (Art. 12)
System: Credit-operations assistant (sample) · Provider/deployer: Acme Bank (fictional)
Period: 2026-01-01T00:00:00+00:00 to 2026-04-01T00:00:00+00:00 · Generated: 2026-10-12T20:21:36.182127+00:00
This report is generated from ReceiptDB's records to support record-keeping obligations. It is not legal advice and not a conformity assessment.
This report names the people and keys that used the system (who asked each question, who placed or released a hold): the operator's own accountability record. Share it accordingly; a data subject's erasure certificate names no one else.
1. Outputs recorded
- 7 answers were recorded with full provenance (inputs, sources, model, asker, time).
- 4 of them are no longer valid, because a source was retracted, superseded or erased since.
- 1 relied on low-trust content, 0 on non-commercial or restricted content, and 1 involved personal data.
By model or agent version
| Transform | Answers |
|---|---|
| agent:credit-assist@claude-opus-5 | 5 |
| agent:credit-assist@claude-sonnet-5 | 2 |
By requester
| User | Answers |
|---|---|
| l.fischer@bank.example | 3 |
| a.dubois@bank.example | 2 |
| s.romano@bank.example | 1 |
| (erased) | 1 |
2. Input data
- 7 sources were ingested in the period.
| Most-used source | Answers citing it |
|---|---|
| sharepoint://credit/lending-policy | 3 |
| sharepoint://credit/underwriting-notes | 2 |
| web://blog/lending-trends | 1 |
| hmac1:2fb673616e8de74dc72105b57b7b07aad6448856e3564ab402972a1c448530bf | 1 |
| hmac1:97efcf86215cf8e8629ad5cfc1bd629f1dbc25ce6a07aedbc3f28ca4fa0eba1b | 1 |
| sharepoint://credit/rate-sheet-q1 | 1 |
| sharepoint://compliance/kyc-procedure | 1 |
3. Outputs invalidated in the period
Outputs whose inputs were later retracted, superseded, erased or quarantined.
| When | Asked by | Question | Status | Reason |
|---|---|---|---|---|
| 2026-03-02T09:05:00 | a.dubois@bank.example | What's the current personal loan rate? | quarantined | quarantine: rates changed on 1 March: out of date |
| 2026-03-04T08:30:00 | l.fischer@bank.example | What's the maximum debt-to-income for a personal loan? | superseded | the March 2026 lending policy |
| 2026-03-04T08:30:00 | s.romano@bank.example | Can we go above 40% DTI for a strong applicant? | superseded | the March 2026 lending policy |
| 2026-03-18T17:45:00 | erased | GDPR Art. 17 request #418 |
4. Data lifecycle events
- Retractions: 0 · Supersessions: 1 · Access changes: 1 · Erasures: 1 · Quarantines: 1 (released: 0) · Model cutovers: 0
Retractions
None in this period.
Access changes
| Source | Reason | Records recomputed |
|---|---|---|
| web://blog/lending-trends | third-party commentary, not for lending decisions | 3 |
Erasures
| Scope | Reason | Records erased |
|---|---|---|
| subject_hash=hmac1:be295b7caa277402e39f883da3a5aceb119d72bfdadb7fde53197f5cf18bfe38 | GDPR Art. 17 request #418 | 4 |
5. Integrity and retention
- Event log hash chain verified (32 events).
- Logs must be kept for a period appropriate to the intended purpose, and at least six months for deployers (Art. 26(6)); providers keep logs under their control (Art. 19). Configure
receipt retentionaccordingly.
Want one from your own deployment? Request a demo.