Implementation of OCP\TaskProcessing\IProvider for AI Act compliance (Article 12)

đź’» Development
1

Hello everyone,

I’m currently working on a Nextcloud 30 deployment for a few clients in regulated sectors like legal and finance. They want to use the Assistant and Mistral features, but their compliance teams are flagging the upcoming EU AI Act deadlines (specifically Article 12 regarding the automatic recording of events).

From what I can see in the current TaskProcessing implementation, there isn’t a native way to generate signed audit receipts or handle local PII redaction before tasks are sent to an endpoint.

To bridge this, I’m developing an app called SovereignGate that implements OCP\TaskProcessing\IProvider to act as a compliance proxy. The goal is to scrub PII locally and generate a signed JSON receipt for the audit trail.

I’d appreciate any technical feedback on a few points:

  1. Has anyone else looked into building audit/interceptor layers for the TaskProcessing API to satisfy these specific regulations?

  2. Are there any internal discussions or roadmap items for adding native compliance logging to the core TaskProcessing manager?

If anyone is working on similar “enablement blockers” for regulated environments, I’d love to connect and compare notes.

2

Hello @Matthew_Schoville,

a general rule of advice: from your text it is not clear what is required and e.g. what PII is. If you are only addressing other devs that are working in the same domain, that is fine in general but you narrow down the amount of people that might help.

In general there are very few people in this part of the forum active that might give good advice, to be honest. So, this might not get to much attention here. Just be warned.

I am not affiliated with the nextcloud core and there might be something on the roadmap. On the last conference, @Daphne held a talk about nextcloud and the AI act. So, I assume, there might be some roadmap and plans. In any case, she might be interested in your work and provide further insights or options.

Chris

1 Like
3

Thanks Chris, really appreciate the pointer. I’m going to reach out to @Daphne and also share back what I learn in case it helps others working in this area.