Article 26 of the EU AI Act (2024), as reproduced by AI Act Explorer, sets a baseline for enterprise audit trails. It requires deployers of high-risk AI systems to retain automatically generated logs for at least six months and assign human oversight. One year earlier, NIST had published the first full release of its AI Risk Management Framework. This framework positions transparency and accountability as measurable characteristics of trustworthy systems.