ISO42001-A.7.6-01
Documentation
A.7.6 — Data Provenance
Establish and maintain data provenance records
Description
The organization must establish and maintain comprehensive records of data provenance for all data used in AI systems, documenting origin, history, transformations, and ownership of the data.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
ISO42001-A.7.6-02
Transparency
Ensure provenance records support traceability
ISO42001-A.7.6-03
Data Governance
Use provenance information for data quality assessment
ISO42001-A.7.6-04
Risk Management
Use provenance information to identify potential biases
ISO42001-A.7.6-05
Conformity
Use provenance information to verify legal and contractual compliance
ISO42001-A.7.6-06
Monitoring
Use provenance information for incident investigation
ISO42001-A.7.6-07
Monitoring
Use provenance information for audit activities
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started