AI Audit & Documentation
What needs to be logged -- and how HOVIGuard automates it.
What Needs to Be Logged
User Information
- User ID and role
- Team and tenant assignment
- IP address and session
Interaction Details
- Request timestamp
- AI model used
- Prompt type and length
Security Events
- Detected PII categories
- Applied protective measures
- Blocked content
Compliance Data
- Data processing location
- Provider and model version
- Response metadata
Log and Export
Why Documentation Matters
GDPR requires proof that personal data is processed lawfully. The EU AI Act tightens these requirements for AI systems. Without a complete audit trail, companies risk significant penalties.
HOVIGuard logs every AI request automatically: time, user, decision and category. The log can be exported as CSV. There are no ready-made compliance reports or PDF export.
Established reference frameworks for audit and security documentation: BSI IT-Grundschutz Compendium and ISO/IEC 27001 (Information Security Management).
Frequently asked questions about AI audit and documentation
Why is an audit trail needed for AI usage?+
An audit trail makes AI interactions traceable. It can support internal reviews, GDPR data-subject requests, EU AI Act documentation and security incident analysis. Legal assessment of which records are mandatory varies by use case and role.
What does HOVIGuard's audit trail log?+
Typically logged: user and tenant attribution, timestamps, model used, prompt metadata, detected PII categories, applied protective measures and response metadata. Which fields are captured in detail is configurable — see documentation and privacy notices.
How long are audit logs retained?+
Retention is configurable and should be aligned with internal policies and applicable legal requirements. HOVIGuard allows setting a retention period; the concrete decision should be coordinated with data protection and the relevant business function.
Can audit data be exported for external reviews?+
Yes, the log can be exported as CSV, e.g. for internal reviews or data protection reviews. Request contents are hidden by default and only visible with explicit access.
Does the audit trail replace legal advice?+
No. The audit trail provides technical evidence and documentation tools. Legal assessment — for example GDPR obligations or EU AI Act requirements — should be coordinated with qualified data protection and legal counsel.