Direct answer
How do we monitor our AI system after it goes live?
You describe: Your high-risk system runs in production. You must keep tracking how it behaves in practice and act as soon as that behaviour deviates from what you established at assessment time. Likely role: provider (you place the system on the market).
This applies now
- For this situation, the preparation phase matters most right now.
Coming up
- Article 72: post-market monitoringfrom 2 December 2027
- Article 73: serious incident reportingfrom 2 December 2027
- Article 12: logging and traceabilityfrom 2 December 2027
Post-market monitoring and incident reporting belong together: the Article 72 monitoring system is how you discover what Article 73 requires you to report. The logs from Article 12 provide the evidence to reconstruct afterwards what happened.
Your first actions
- Draw up a post-market monitoring plan. Systematically collect and analyse real-world data on the system’s performance and compliance throughout its lifetime.
- Set up an incident process with reporting routes. Define what a serious incident is, assign the reporting route to the supervisor and rehearse the process.
- Design logging into the system. Ensure the system automatically records events relevant to risk identification and post-market monitoring.
Record this
- Monitoring plan and reports
- Incident register and reports
- Logs and retention regime
prEN 18229-1: AI trustworthiness framework part 1, logging
prEN 18229-1 (AI trustworthiness framework, Part 1: Logging) is the JTC 21 deliverable under M/613 for Article 12 of the AI Act: high-risk AI systems must technically allow for the automatic recording of events over their lifetime. As at June 2026 the deliverable was at the Enquiry stage. It has not yet been published as an EN and is not cited in the Official Journal.
General interpretation, not legal advice. Checked against Regulation (EU) 2024/1689 and the Digital Omnibus (EU) 2026/1744; the official source remains authoritative.
Full map for your situationExecution
From obligation to arranged and demonstrable
Knowing where you stand is step one. Embed AI translates this obligation into a concrete approach for your organisation: scope, ownership, register and evidence.
See the Embed AI approach