# GOV-11 Regulatory documentation pack (Critical)

Domain: GOV Governance & Accountability · HI-AAF v1.3 · Public review · https://humanintel.net/standard/gov/gov-11

For agents classified as high-risk under applicable regulation, a technical documentation pack equivalent to EU AI Act Annex IV is maintained and updated on material change.

For each agent classified as high-risk under applicable regulation (e.g., EU AI Act Annex III), a technical documentation pack is maintained covering system description, design specifications, data governance, monitoring evidence, accuracy and robustness metrics, and risk-management process records. The pack is updated on every material change and is available for regulatory inspection.

Critical control: a Critical failure precludes HI-AAF Certification regardless of the maturity level achieved on any other control.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for GOV-11: Documentation packs exist for all high-risk agents; packs are current within the documented cadence; the most recent update aligns with the date of the last material change in the change-management record.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Documentation packs exist for all high-risk agents.
- Packs are current within the documented cadence.
- The most recent update aligns with the date of the last material change in the change-management record.

## Framework mappings

- NIST AI RMF: GOVERN 5.1, MEASURE 4.3
- ISO/IEC 42001: 9.3, A.2.3
- SOC 2 (TSC): CC1.3, CC4.1
- EU AI Act: Art. 9(1), Art. 17, Annex IV
- Singapore: MAIGF Internal Governance, AI Verify Accountability

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, GOV-11 Regulatory documentation pack. Public review edition, July 2026. https://humanintel.net/standard/gov/gov-11