Chain of Custody and Retention
Objective
Ensure telemetry is retained and access-controlled sufficiently to support post-incident investigation and potential regulatory or legal proceedings.
Control / requirement
Defined retention period, access logging, and custody documentation sufficient to establish evidentiary integrity if telemetry is later relied upon outside the organization.
Applicability
All physical AI systems, with retention period scaled to consequence severity and applicable jurisdiction.
Expected evidence
Retention policy; access control logs; custody documentation. [T2]
Assurance expectation
Documentation review confirming retention practice matches policy in actual operation, not only on paper.
Dependencies
PAI-SF-TEL-001 (integrity) — custody is only meaningful if the underlying telemetry is itself tamper- evident.
Exclusions
Retention period requirements may not apply where no jurisdiction imposes a minimum and organizational policy is the only driver.
Maturity / conformance relevance
Expected at all conformance levels; sophistication of custody documentation scales with consequence.
Ecosystem relationship
Supports AI-IRF™'s post-incident investigation and any downstream regulatory or legal process referencing the incident.