How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Request & Response Logging
Log safety and policy decisions
Verify that safety filtering and policy decisions are logged with sufficient detail to support audit, debugging, and forensic analysis of content moderation systems.
OWASP AISVS v1.01, requirement 12.1.2
In plain English
Log every safety filter and policy decision in enough detail to audit it, debug it and investigate incidents later.
What good looks like
- Each decision records what was checked, the result, the category and the score.
- Logs link to the request and session.
- Logs are retained according to policy.
How teams usually do it
- Structured logging from the filtering layer to your central log store.
Evidence an auditor would accept
- Sample log entries.
Common mistakes
- Logging "blocked" with no reason.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.