Retention Requirements Article 18 establishes the ten-year retention baseline for technical documentation. This applies directly to Categories B, D, and E. Category A artefacts inherit the retention requirement because they constitute the evidence underlying the AISDP claims. Category C governance records are retained for the same period because they document the organisation’s state of knowledge. Storage tiers reflect access frequency. Category E artefacts remain in hot storage throughout the system’s operational life; they may be requested by authorities at any time. Category A pipeline logs move to cold storage after the operational monitoring period but must remain retrievable. Deletion verification procedures apply at the end of the retention period, with specific attention to GDPR storage limitation reconciliation. Key outputs

• Per-category retention period specification
• Storage tier guidance by access frequency
• Deletion verification protocol