EU AI Act
EU AI Act Article 10: Data and data governance
UpcomingApplies from 2 Dec 2027. Applies from 2 Aug 2028 for high-risk AI systems under Article 6(1) and Annex I.
High-risk AI systems which make use of techniques involving the training of AI models with data shall be developed on the basis of training, validation and testing data sets that meet the quality criteria referred to in paragraphs 2, 3 and 4 of this Article and in Article 4a(1) whenever such data sets are used.
Article 10, paragraph 1. Regulation (EU) 2024/1689, consolidated text of 27 July 2026. Read the full text on EUR-Lex
EUR-Lex text is reused under Commission Decision 2011/833/EU. Guidance is stored as an interpretation, not as a statute.
What evidence usually supports this
- Data contracts for training, validation and test sets
- Dataset manifests and bias checks
- Contract check history showing no breaking drift
Maps to the DATA_GOVERNANCE control in the Assurance OS catalog.
How Assurance OS gates it
Data contracts are checked for schema and distribution changes. A failing contract check becomes a blocker on the release.
This page shows an excerpt of the law and the evidence teams commonly keep for it. It is not legal advice and does not say whether your system complies. Read the full text and take legal advice for your case.
Gate Article 10 evidence in CI.
Free plan, no card. Assurance OS checks the evidence on every release and hands buyers a signed pack.