Post-market monitoring
Set up recurring monitoring cycles for deployed AI systems with automated reminders and PDF reports.
Overview
Post-market Monitoring (PMM) is how you keep track of a high-risk AI system after it goes live. EU AI Act Article 72 requires providers of high-risk AI systems to establish and document a monitoring plan. VerifyWise automates this with recurring monitoring cycles, structured question-based assessments, automatic reminders, and PDF report generation.
How it works
- You configure a monitoring schedule for a project (e.g., every 30 days).
- When a cycle is due, the assigned stakeholder gets an email notification.
- They open the monitoring form and answer a set of structured questions about the system's current state.
- If any concerns are flagged, an escalation email goes to the designated contact.
- Once complete, a PDF report is generated and stored for audit purposes.
Setting up monitoring
Open a project and go to the Monitoring tab. If monitoring hasn't been configured yet, you'll see the setup form.
| Setting | What it does |
|---|---|
| Frequency | How often cycles run (e.g., every 30 days, every 2 weeks, every 3 months) |
| Start date | When the first cycle should begin |
| Reminder days | How many days before the due date to send a reminder email |
| Escalation days | How many days past the due date before escalating to the designated contact |
| Escalation contact | Who gets notified if a cycle is overdue |
| Notification hour | What time of day to send email notifications |
| Active | Toggle monitoring on or off without deleting the configuration |
Monitoring cycles
Each cycle represents one round of monitoring. Cycles move through these statuses:
| Status | Meaning |
|---|---|
| Pending | Cycle is scheduled but not yet started |
| In progress | Stakeholder has started answering the monitoring questions |
| Completed | All questions answered and report generated |
| Escalated | Cycle was not completed by the due date and has been escalated |
Monitoring questions
Each cycle presents a set of structured questions. Questions can be:
- Yes/No: Simple binary questions with optional suggestion text shown when the answer is "No"
- Multi-select: Choose one or more options from a predefined list
- Multi-line text: Free-form responses for detailed explanations
Questions can be flagged for concern. When a response is flagged, it appears highlighted in the report and can trigger an immediate notification to the escalation contact.
Tracked metrics
Each cycle captures a snapshot of the project's current state:
- Risk counts by level (high, medium, low)
- Number of linked models and vendors
- Model and vendor risk counts
- Use case status at the time of the cycle
These snapshots let you track how the project's risk profile changes over time across multiple monitoring cycles.
Reports
When a cycle is completed, VerifyWise generates a PDF report containing the organization name, use case, cycle number, completion date, the context snapshot, all responses, flagged concerns, and the mapped EU AI Act articles. You can download reports from the Monitoring tab.
Email notifications
The system sends 5 types of email notifications during the monitoring lifecycle:
- Initial notification: Sent when a new cycle is assigned to a stakeholder
- Reminder: Sent N days before the cycle is due (configurable)
- Escalation: Sent to the escalation contact when a cycle is overdue
- Flagged concern: Sent immediately when a response is flagged as a concern
- Completion: Sent when a cycle is fully completed
Who can do what
| Action | Required role |
|---|---|
| View monitoring cycles and reports | Any authenticated user |
| Configure monitoring settings | Admin or Editor |
| Answer monitoring questions | Admin or Editor |
| Download reports | Any authenticated user |