# A.8.2 System documentation and information for users

Determine what information users of the AI system need and provide it. In practice the record is user information covering purpose, that the user is dealing with AI, how to interact and override, technical requirements and limitations, human oversight needs, accuracy and performance, relevant impact assessment findings, benefit claim revisions, updates, contacts and training material. For system documentation and information for users the test is what a reader outside the team understands.

- Framework: ISO/IEC 42001:2023
- Cited to: ISO/IEC 42001:2023, Annex A control A.8.2
- Source: https://www.iso.org/standard/81230.html
- Last updated: 2026-10-20

## What it asks

Determine what information users of the AI system need and provide it.

## Where generative AI changes the answer

User documentation has to state the limits of the system in the user's terms, including the cases where its answer should not be relied on.

## Who it binds

The AI system owner and the communications or customer function.

## Evidence an auditor samples

- User information covering purpose, that the user is dealing with AI, how to interact and override, technical requirements and limitations, human oversight needs, accuracy and performance, relevant impact assessment findings, benefit claim revisions, updates, contacts and training material
- Documented criteria for deciding what information is given
- Validation that users can access complete, current information

## The test you can run

Ask a customer-facing colleague to explain the system limits. Compare that with the published statement.

## Common failures

- Users not told they are interacting with AI
- No criteria for what information users receive
- Information not kept current after updates

## Before the draft publishes

Read the user-facing statement as a customer would, and check that it names the limits of the system rather than its features.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.