Preuves et vérification

What the implemented recording captures, what it leaves out, and where evidence is limited.

Recorded metadata

  • Requested and used model, version and endpoint id.
  • Region, sovereignty class, route reason and policy id.
  • Token counts, latency, time to first byte and cost in USD and EUR.
  • Status and error code for recorded calls. Early rejections or write failures may leave no trace.

Retention: implemented versus configurable

Only zero retention is implemented and it is the default: prompt and completion bodies are not written to the database; body columns remain NULL. Policies can store 24h, 7d or 30d choices. This enables neither encrypted body storage nor an operational retention window.

A request exceeding the policy limit is rejected first with 403 retention_exceeds_policy. An allowed effective retention other than zero returns 501 retention_not_implemented, including a value inherited from the policy. A request may explicitly narrow retention to zero.

Export

curl https://api.llmeu.com/platform/v1/traces?limit=200 \
  -H "Authorization: Bearer $LLMEU_API_KEY"

Console downloads: Exports.

The account export me.json contains selected account fields, organizations, API-key metadata (no secrets), current policies, the latest 200 traces per organization and daily usage aggregates for 365 days. It is not a complete copy of all personal data and not a historical policy record.

The separate audit.ndjson export defaults to 7 days, allows at most 90 days and caps traces at 5000. Check counts.truncated in the manifest: reaching the cap marks the export as potentially truncated. Policies and endpoint cards reflect current state, not historical state at request time. Export windows are not deletion schedules; data-subject requests and deletion still require manual handling.

Limits of evidence

A trace is a self-reported operational record, not independent geolocation, a legal opinion or a conformity assessment. Mock responses carry dev-mock; no model weights run. LLM EU Verified signifie documenté, pas légalement certifié. Ce n'est pas une évaluation de conformité au règlement sur l'IA et LLM EU n'est pas un organisme de l'UE.