Log and manage incidents, with every reporting deadline

Log an incident as soon as you know about it. Legal reporting deadlines count from the moment you became aware, so the earlier it's recorded, the more time you have.

Log it

1. 1
   Go to Issues → Incidents → + Log an incident.
2. 2
   Say what happened, which AI system was involved, and the severity.
3. 3
   Set when you became aware. Every deadline counts from this time.
4. 4
   Tick the reporting rules that apply. V77 Trust shows the deadlines before you save:

   • EU AI Act serious incident (Art. 73): for providers of high-risk systems. 15 days in general; 10 days if a person died; 2 days for widespread infringements or serious disruption of critical infrastructure.
   • DORA major ICT incident: for financial entities. Initial notification within 4 hours of classifying it as major (and no later than 24 hours after becoming aware), an intermediate report within 72 hours of the initial one, and a final report within a month of the intermediate one.
   • GDPR personal data breach (Art. 33): notify the lead supervisory authority within 72 hours, unless the breach is unlikely to result in a risk to people.

While it's open

• Each deadline shows Due, Overdue since or Submitted. Choose Mark submitted once you've filed the report.
• Record the impact, root cause and corrective actions as you learn them.
• Move it through Investigating and Mitigated. You can Close it only once the root cause is recorded.
• For serious incidents, download a draft of the Article 73 report to adapt and send.

Editors are notified when a report is due within 24 hours, and again if it becomes overdue.