STACK
MENU

Article 14, clause by clause

Article 14 requires high-risk AI systems to be designed for effective human oversight. This page shows which parts STACK can enforce or record, and which decisions belong to the provider or deployer.

Article 14 clauses
14(1) + 14(3)

Effective oversight

Article 14 requirement

High-risk AI systems must support effective human oversight. The measures must match the system’s risk, autonomy and context of use.

What STACK does

STACK checks protected agent requests against the current Passport, records the result and can stop further access through revocation.

Provider or deployer responsibility

The provider defines the oversight measures. The deployer puts them into practice and assigns people with the required authority and training.

Article 12

Record-keeping

Requirement
High-risk AI systems must automatically record events throughout the system’s lifetime.
What STACK does
STACK records Passport issuance, credential use, protected requests, checkpoints and revocation. Audit entries are append-only and linked by hash.
Provider or deployer responsibility
The provider determines which system events Article 12 requires. Providers and deployers retain the logs under their control for the applicable period.
Article 15

Accuracy, robustness and cybersecurity

Requirement
High-risk AI systems must maintain appropriate accuracy, robustness and cybersecurity throughout their lifecycle.
What STACK does
STACK keeps service credentials outside the agent process, encrypts stored credentials with KMS and records protected requests. These controls address the credential and agent-access part of Article 15.
Provider or deployer responsibility
The provider is responsible for the system’s accuracy, resilience, security testing and lifecycle controls.

Records available for review

Action history

The request, agent, Passport, result and time for each recorded action.

Decisions and interventions

Detector findings, denials, checkpoints and revocations, with the reason recorded for each decision.

Evidence Pack

A signed export containing the records, hashes and schemas an external reviewer needs to verify the file.

STACKONE RUNTIME BOUNDARY FOR AI AGENTS.
BUILT IN STOCKHOLM.
$npx @getstackrun/cli setup
ATTACK OUR AGENT
PRODUCTPRODUCTPRICINGFOR PLATFORMSINTEGRATIONS
DEVELOPERSDOCSACCEPT AGENTSSIGN IN
TRUSTSECURITYAGENT SECURITYATTACK USEU AI ACT ART. 14
COMPANYCONTACTPRIVACYTERMS
© 2026 STACK · Stockholm, SwedenHELLO@GETSTACK.RUN
stack | EU AI Act compliance