# MON-02 Log retention and tamper evidence

Domain: MON Continuous Monitoring & Human Oversight · HI-AAF v1.3 · Public review · https://humanintel.net/standard/mon/mon-02

Logs are retained per regulatory and operational requirements and stored in tamper-evident form.

Audit logs of agent actions are retained for a documented period appropriate to the regulatory environment and stored in tamper-evident form. Tamper evidence ensures that logs cannot be modified after the fact, which is critical for incident investigation, regulatory response, and assessment evidence. Retention periods match the requirements of applicable law and the organization's data retention policy.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for MON-02: Retention periods are documented and enforced; logs are stored in tamper-evident form (append-only, cryptographic integrity, or equivalent); retention compliance is audited at a documented cadence.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Retention periods are documented and enforced.
- Logs are stored in tamper-evident form (append-only, cryptographic integrity, or equivalent).
- Retention compliance is audited at a documented cadence.

## Framework mappings

- NIST AI RMF: MEASURE 2.4, MEASURE 2.11
- ISO/IEC 42001: A.9.3
- SOC 2 (TSC): CC7.3, CC8.1
- EU AI Act: Art. 14(4)
- Singapore: AI Verify Human Agency & Oversight

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, MON-02 Log retention and tamper evidence. Public review edition, July 2026. https://humanintel.net/standard/mon/mon-02