Law · Articles 8–27 · enforcement from August 2026
Annex IV technical documentation is weeks of writing for every provider of a high-risk system. Provenant produces most of it for you.
Provenant does it. You can show it before your agent runs.
Where the standard asks you to prevent something the model might do, Provenant limits how far it gets.
Where the standard asks you for a plan, a policy or a test, Provenant hands you what it needs.
| Ref | Requirement | How | Mechanism |
|---|---|---|---|
| Art 8 | Compliance with the requirements | Evidenced | The evidence for each article comes from one place |
| Art 9 | Risk management system | Evidenced | You start from a complete list instead of an inventory exercise |
| Art 10 | Data and data governance | Enforced | You choose what data reaches the system, field by field |
| Art 11 | Technical documentation | Evidenced | The system description is written for you |
| Art 12 | Record-keeping | Enforced | Every decision recorded as it happens, and it can't be altered later |
| Art 13 | Transparency and information to deployers | Evidenced | Your deployers get something they can act on |
| Art 14 | Human oversight | Enforced | The steps that matter stop for a person, and you choose what they see |
| Art 15 | Accuracy, robustness and cybersecurity | Contained | A wrong result can only reach what you allowed |
| Art 16 | Obligations of providers | Evidenced | The evidence for each obligation comes from one place |
| Art 17 | Quality management system | Evidenced | Every change is tracked and attributable |
| Art 18 | Documentation keeping | Enforced | Produced by running, kept automatically |
| Art 19 | Automatically generated logs | Enforced | Produced by running, kept automatically |
| Art 20 | Corrective actions and duty of information | Evidenced | You can tell what was exposed and what was actually touched |
| Art 21 | Cooperation with competent authorities | Evidenced | The record shows what happened; your setup shows what could have |
| Art 22 | Authorised representatives | N/A | |
| Art 23 | Obligations of importers | N/A | |
| Art 24 | Obligations of distributors | N/A | |
| Art 25 | Responsibilities along the AI value chain | Evidenced | Your vendor list writes itself |
| Art 26 | Obligations of deployers | Enforced | Staying inside the rules is the default, not a discipline |
| Art 27 | Fundamental rights impact assessment | Evidenced | You know what the system considered without reconstructing it |