Skip to content
C50 Clause50EU AI Act transparency — made auditable.EU AI Act evidence, made auditable
Sign in
All documentation

FAQ

Short answers to the questions people hit in their first ten minutes.

Three questions account for most of the trouble in the first ten minutes. Your ordinary OpenAI or Anthropic key is rejected because the connector reads organisation-wide usage and needs an Admin key. A GitHub token is a credential you create in your own GitHub settings, limited to one repository. And recording a statement versus uploading a document are two ways into the same permanent log — you choose by where the proof actually lives.

Everything below is a short answer with a link to the page that explains it properly.

More detail

The three questions people hit first

  • What is a GitHub access token, and how do I get one?It is a credential you create in your own GitHub account settings that lets another application read something on your behalf. Clause50 needs a fine-grained token, limited to the single repository you are connecting, with read-only access to Contents — nothing more, because the connector only ever reads that repository's list of commits. Step by step: Creating a GitHub personal access token.
  • How do I get an OpenAI or Anthropic Admin key — and why is my normal key not working?Because the connectors read organisation-wide usage reports. An ordinary project or workspace key — the one used to call the models — has no authority over organisation-level information, so it is rejected. You need an Admin key, created in your provider's organisation settings by someone who administers the account. Step by step: OpenAI · Anthropic.
  • What is the difference between recording a statement and uploading evidence — and are they related?They are two ways of putting a record into the same permanent evidence log, and you choose between them by where the proof lives. A statement (an attestation) is a person confirming that a requirement is met — use it when the proof is a practice or a decision. An upload attaches a file, whose exact contents are verified after upload — use it when the proof is a document. Neither replaces the other, and a given requirement usually accepts one specific kind. Both: Evidence.

Connectors

  • I chose the manual connector but there is no upload box.The bulk import box only appears once a manual connector exists on that system. Add the connector first — it needs no key and no token — and the box appears beneath it. Manual import.
  • My import failed and nothing was imported at all. Is that right?Yes. If any row fails validation the whole batch is rejected and nothing is written — a half-imported file would leave you unable to tell what made it in, on a record that cannot be edited afterwards. Fix the row and import again. Manual import.
  • I imported the same file twice and now everything appears twice.That is intended: there is no duplicate detection on manual import. For a record that can only be added to, a visible duplicate is a safe failure and silently discarded evidence is not. Manual import.
  • My connector says active but recorded nothing.A normal, honest result — no new commits in the repository, or no usage in the window. Clause50 does not manufacture an empty record to look busy. Syncing.
  • I connected OpenAI. Why did my score not move?The usage connectors collect totals, not conversations, so they cannot prove that a disclosure was shown to a user. They give you a continuous record of operational activity; duties that need proof of what a user saw are met by a statement or an uploaded document. What each connector collects.
  • Where is my API key stored, and can anyone read it?It is sealed before it reaches the database and cannot be read back out in plain text — including by someone with direct database access. Only the running server can open it, at the moment it calls the provider. It is never written to a log, returned by the interface, or shown on a page again. Connectors.
  • If I remove a connector, does its evidence disappear?No. Removing a connector deletes the connector and its stored credential. Evidence it already contributed stays on the record permanently. Evidence.

Evidence and coverage

  • I recorded the wrong thing. How do I delete it?You cannot, and neither can Clause50 — the evidence log can be added to but never edited or deleted. Record the correct evidence instead; the wrong entry stays and stops counting towards anything. The consequence is worth planning around: do not put anything into a statement or an uploaded file that you may later need erased. Why the record cannot be edited or deleted.
  • I added evidence but my score did not change.Give it an hour, or press Recompute if you would rather not wait. Clause50 rechecks every system hourly and rescores any that has fallen behind, but it never recalculates just because you opened a page — each score is a dated record that documents cite, so it is produced on a schedule or on request rather than on every page view. When the score updates.
  • What does stale mean, as opposed to missing?Stale means you had proof and it has aged out of its window, or is tied to a superseded version of your record. Missing means there was never any. Both count as gaps, but the work differs. The four statuses.
  • Why is a duty listed but not counted in my score?Because it is not yet in force for you. Upcoming duties are shown for planning and excluded from the score, so the number answers one question — how you stand today — rather than mixing in a future deadline. Why upcoming duties are excluded.
  • What is a good score?There is no target. The score counts records rather than judging them, so it is a progress indicator for you, not a grade for anyone else. A first score close to zero is the expected starting point. Coverage.

Documents and plans

  • Does the signature mean my document is certified?No. It proves the document has not been altered since Clause50 produced it, and that the evidence and figures inside it are the ones it was built from. It proves nothing about whether the underlying facts are true, and Clause50 issues no compliance verdict. What the signature does not prove.
  • Can I produce a document on the free plan?Yes. Generating is free on every plan; what a paid plan buys is the clean, signed download. A free plan gets a preview and never receives the signature. Free preview versus paid download.
  • I generated again. Did I lose the previous version?No. Each run creates a new version and marks the previous one superseded; the earlier files and signature are untouched. Draft, then final.
  • I got a Word file but no PDF.Document conversion was unavailable at the time, so Clause50 produced the Word file and omitted the PDF rather than failing the whole run. Generate again to retry. Artifacts.
  • What happens to documents I already downloaded if my plan changes?A file you already hold stays yours and its signature keeps verifying — Clause50 cannot reach into your systems. Downloading a fresh copy is checked against your plan at the moment you ask, so keep a copy of anything you have issued. Artifacts.

Alerts, and everything else

  • How do I mark an alert as done?You do not — there is no resolve button. An alert is a dated notification, not a ticket. Fix the underlying condition and no further alert is raised for it; the original stays as history. Why an alert is not a task.
  • I have gaps but no alerts.Alerts are only produced for systems whose coverage has been calculated at least once — there is no honest baseline to compare against before that. The hourly pass calculates it for you, so this normally resolves itself within the hour; pressing Recompute gets you there immediately. Alerts.
  • Is Clause50 legal advice?No. It is a record-keeping and evidence tool. It does not determine your obligations under Regulation (EU) 2024/1689, certifies nothing, and is not a conformity assessment. For a plain-English explanation of the regulation itself, see the EU AI Act guide.
  • What does the free website scan actually check?Only what is visible from outside a page: fingerprints of common chat widgets, references to generation toolkits, and provenance markers on a small number of images. It cannot see inside your application, so a clean result is not a pass — it is the absence of a signal. Duties that cannot be observed from outside are always returned as needing assessment. Free scan.
  • Can anyone else see my data?Every read and write is scoped to your organisation, and that scoping is enforced in the data layer rather than by each page remembering to filter. Clause50 operators have a separate, deliberately narrow support view, and each time it is used to open a specific organisation an entry is written into that organisation's own activity log, where you can see it. See the Privacy Policy.