{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-06","description":"Produce and maintain technical documentation for each AI system covering design and development decisions, architecture, model and data characteristics, performance, and limitations, including all content mandated by applicable regulation for higher-risk systems. Keep documentation up to date through changes and retain it for the regulatorily mandated period. Documentation must be sufficient for regulators and assessors to evaluate compliance.","details":{"control_category":"administrative","control_type":"preventive","domain":"AI Governance","guidance":[],"members":[{"control_id":"A.6.2.3","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.6.2.7","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"AIA-Art11","coverage":"full","framework":"eu-ai-act","relationship":"superset_of"},{"control_id":"E017","coverage":"partial","delta":"external transparency artifacts (model cards, datasheets, AI bill of materials) and a shared-responsibility statement distributed under a documented sharing policy","framework":"aiuc-1","relationship":"intersects_with"},{"control_id":"AIA-Art18","coverage":"partial","delta":"ten-year retention of technical documentation, quality-management records, and conformity documents after the system is placed on the market","framework":"eu-ai-act","relationship":"intersects_with"}],"statement":"Produce and maintain technical documentation for each AI system covering design and development decisions, architecture, model and data characteristics, performance, and limitations, including all content mandated by applicable regulation for higher-risk systems. Keep documentation up to date through changes and retain it for the regulatorily mandated period. Documentation must be sufficient for regulators and assessors to evaluate compliance.","title":"Maintain AI system technical documentation","unified_id":"UC-AI-06"},"id":"uc:UC-AI-06","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-06","sourceIds":["aiuc-1","eu-ai-act","iso-42001"],"sourceUrl":null,"title":"UC-AI-06 — Maintain AI system technical documentation","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:069ac1259e7f29f7bbf03232bd2d8b50070b882b90869b336c8a2914671d90d2","properties":{"rationale":"Regulator/assessor-sufficient documentation is the due-diligence evidence that reduces compliance liability.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2ebc35144e59f52191a4f3a972c4fb4dcee0c2cd0fb534c78ed76e3e744ffa47","properties":{"control_id":"AIA-Art18","coverage":"partial","delta":"ten-year retention of technical documentation, quality-management records, and conformity documents after the system is placed on the market","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art18-5be0da8a.json","targetId":"ctrl:eu-ai-act:AIA-Art18","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:30b0033b5572c79229b0e021dd5fd945995d634f656a5e1c5946b93957240d21","properties":{"rationale":"Technical documentation supplies the model/data characteristics, limitations and datasheets the risk says are missing, letting operators see failure modes.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/risk-ai-lack-explainability-transparency-edbd29e2.json","targetId":"risk:ai-lack-explainability-transparency","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4c80ad8271ed4d52778610eaebbaa683be460e6a1f6905a97b1a98eaaef59d1b","properties":{"control_id":"AIA-Art11","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art11-6286951e.json","targetId":"ctrl:eu-ai-act:AIA-Art11","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:57f44c4f7c525479290478a6c7dadc541ac6f01bf8560791880bfe8ef84efaba","properties":{},"sourceDetailPath":"/data/v1/records/wf-d59-b3ddf606.json","sourceId":"wf:D59","targetDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","targetId":"uc:UC-AI-06","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:81cf53b47148f5f9286805502f13c047cf578960112bd00a8b17a6b309210abd","properties":{"control_id":"A.6.2.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-3-252ad2fb.json","targetId":"ctrl:iso-42001:A.6.2.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a40ea91da42c62c6eacc53e2655a44e95b18b26a6ecc50c2554ac27c8c221976","properties":{"control_id":"E017","coverage":"partial","delta":"external transparency artifacts (model cards, datasheets, AI bill of materials) and a shared-responsibility statement distributed under a documented sharing policy","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e017-016942cc.json","targetId":"ctrl:aiuc-1:E017","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a91c93550b12aff354a5b724c408dc5b9120050bd6a11d6e4dc3fdc056a4c3d3","properties":{},"sourceDetailPath":"/data/v1/records/wf-r13-431c488e.json","sourceId":"wf:R13","targetDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","targetId":"uc:UC-AI-06","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ba33b0b3920b1001f96a22946e11252fbb945a4587ec882bbf2822b970d3d3af","properties":{"rationale":"Documented performance and limitations flag where outputs are unreliable so users do not over-trust them.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/risk-ai-inaccurate-unreliable-output-cf10c86e.json","targetId":"risk:ai-inaccurate-unreliable-output","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dfff7d4405e2b41e0103778873b508e00198a737511797eb4510f4be1b5d2111","properties":{"rationale":"Architecture and model documentation helps integrators interface correctly, reducing integration mismatches.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/risk-ai-emergent-integration-risk-8490271c.json","targetId":"risk:ai-emergent-integration-risk","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f52e1be7e35ec4f9a2e1f832cb164f24f904d4c72859dd40ac9485c027d4a193","properties":{},"sourceDetailPath":"/data/v1/records/wf-g1-14bc355c.json","sourceId":"wf:G1","targetDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","targetId":"uc:UC-AI-06","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ffcd8c3ea2d4454e5fe0ca418f3af6f735403fa06868d4d24ce0148afa4b3ab5","properties":{"control_id":"A.6.2.7","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-7-763177a5.json","targetId":"ctrl:iso-42001:A.6.2.7","type":"maps_to"}],"schemaVersion":1}