Control #
C
4
.
1
Define AI log retention policy
Establish a clear policy for how long AI inputs and outputs are retained and for what purpose. The policy should reflect a balance between safety, debugging, and user privacy.
Evidence
Policy document specifying log retention period
Recommended actions
We'll recommend specific practices and actions for complying with this control.