What was tested, who signed off, what changed. Kept, not assumed.
On the Record is the guardrail that makes every other one provable. Every AI system gets a living record: what it does, who owns it, what was tested, and what changed, kept somewhere you could actually hand to an auditor.
What recordkeeping actually looks like
A record that makes sense to an outsider
Every system has a record you could hand to an auditor, a regulator or a new hire and have it actually make sense.
Testing and sign-off logged
What was tested, who signed off, and when, is logged as it happens, not reconstructed from memory later.
Incidents are logged, not patched quietly
Incidents, near-misses and fixes get recorded, not quietly patched and forgotten.
Reviewed, not just filed
The record is reviewed on a schedule, not treated as paperwork to file and never reopen.
“Trust us” should never be the whole answer
Every guardrail on this page is a claim. This one is the evidence. A business that can show its record, not just describe its intentions, is the one that survives a tender question, a regulator’s call, or a customer’s reasonable doubt.
Grounded in
- Australia’s Voluntary AI Safety Standard, guardrail 9 (recordkeeping)
- ISO/IEC 42001, Clause 9 (performance evaluation)
The rest of the framework
All ten guardrails run through every engagement. Here are the other nine.
Frequently asked questions
Is this the same as documentation?
Related, but sharper. Documentation explains how something works. This is a living record of what has actually happened to it.
Who keeps this record, us or you?
You. It is built as part of the engagement and it is yours to keep, the same way the free audit report is yours to keep.
Find out where your governance actually stands. Governance is one of six things the free audit scores.
Get the free audit