Providers must establish and document a post-market monitoring system proportionate to the nature of the AI technologies and to the risks of the high-risk AI system. That system must actively and systematically collect, document and analyse relevant data on the performance of the system throughout its lifetime, whether provided by deployers or collected through other sources, so the provider can evaluate the system's continuous compliance with the Chapter III Section 2 requirements, including where relevant an analysis of interaction with other AI systems. The system must be based on a post-market monitoring plan that forms part of the Annex IV technical documentation and follows the template adopted by the Commission. Where an equivalent post-market monitoring system and plan already exist under Section A of Annex I legislation, the required elements may be integrated into them provided an equivalent level of protection is achieved.
EU AI Act EUAI-Art.72 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of EU AI Act your existing evidence covers. Hold ISO/IEC 42001:2023 and 17 of 43 EU AI Act controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO/IEC 42001:2023 pair alone.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.