Audit Trails for LLM Apps: What Regulators Really Demand

When the EU’s Digital Services Act fined a German fintech €3.2 million for failing to produce a single “prompt‑to‑output” log after a complaint, its legal team spent three weeks reconstructing 12 hours of chat history — see our security tooling notes for the full breakdown. Why “Explainability” Isn’t the Compliance Trigger Legal definitions versus technical glossaries Regulators talk about “traceability” and “auditability” in statutes, not about the fuzzy notion of “model interpretability” that