Resources

Reference documents for regulated entities and the suppliers they assess.

Vendor assessment

Five questions to ask an AI vendor

Sets out five questions on contemporaneous record-keeping, reconstruction of a single decision, tamper-evidence, supplier inventory, and boundary events and retention. Each question is given with the answer it requires.

Last updated August 2026.

Standards

CPS 230 for AI agents

Explains how the operational risk standard applies where an agent, rather than a person, carries out an operational process.

Last updated August 2026.

Record-keeping under the EU AI Act

Separates Article 12 and Annex IV from Arkna’s operational interpretation of useful traceability.

Last updated August 2026.

Explanatory material

Why a separate record matters

Sets out the case for keeping the record outside the system that produced the decision, and what observability tooling establishes.

Last updated August 2026.

These documents may be copied, quoted or adapted without attribution. They are general information only, summarise Arkna’s reading of the cited material and are not legal, compliance or professional advice.