Security & GovernanceHow long do you have to keep AI agent logs? A retention reference
A practical reference for how long records of automated and AI-driven activity must be kept, from the EU AI Act (6 months to 10 years) to PCI DSS, SOC 2, HIPAA, SOX and MiFID II, with sources. General guidance, not legal advice.
Security & GovernanceAI transparency law: a disclosure label is not transparency for an agent
Transparency obligations for AI are arriving, from the EU AI Act onward. For a chatbot that can mean a disclosure label. For an agent that takes actions, transparency means a verifiable record of what it did, on whose authority, and with what result.
Security & GovernanceHow an auditor verifies an AI agent compliance evidence pack offline
An AI agent compliance evidence pack has to answer one question on the auditor's own laptop, with no login and no call back to your servers: what did this agent do, was it allowed to, and can you prove it. A worked example of what a pack contains and how it gets verified offline.
IndustryFinancial Services and AI Agents
When every decision needs a paper trail. A credit decision takes milliseconds. The regulatory obligation to explain it lasts years.