How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Training Data & Model Lifecycle Audit
Record dataset lineage
Verify that dataset lineage records each dataset and its components, including all transformations, augmentations, and merges.
OWASP AISVS v1.01, requirement 12.5.1
In plain English
Record the lineage of every dataset: what it is made of and every transformation, augmentation and merge applied to it.
What good looks like
- Each dataset version has a lineage record.
- Every processing step is captured.
- You can trace a model back to its source data.
How teams usually do it
- Data versioning and lineage tools in the data pipeline.
Evidence an auditor would accept
- Lineage for a deployed model's training data.
Common mistakes
- Lineage that stops at the first processed copy.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.