RussiaFederal Law No. 243-FZ, Article 8, Duties of Sovereign and National Foundation Model Developers
Federal Law No. 243-FZ, Art. 8 ()
An AI governance rule binding private bodies.
- Criminal exposure
- No
- How the hook was established
- express
- What makes it apply
- Operator establishment
- Obligation class
- Governance
- Audit expectation
- none
What it requires
- If you develop a sovereign or national large foundation AI model, take organizational and technical measures to secure it, define operating rules covering restrictions, conditions of use, updates, and decommissioning, and maintain technical documentation of its key parameters and limitations sufficient to assess the safety of its application.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- GOVERN 1.4The risk management process and its outcomes are established through transparent policies, procedures, and other controls based on organizational risk priorities.
- MAP 2.2Information about the AI system’s knowledge limits and how system output may be utilized and overseen by humans is documented. Documentation provides sufficient information to assist relevant AI actors when making decisions and taking subsequent actions.
- MEASURE 2.7AI system security and resilience – as identified in the MAP function – are evaluated and documented.
- NIST AI 600-1
- GAI-RISK-07Human-AI Configuration
- NIST AI 200-2 Draft
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI09Human-Agent Trust Exploitation
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-005System Acceptance Testing
- AIR-PREV-006Data Quality & Classification/Sensitivity
- AIR-PREV-024Human-in-the-Loop Action Approval Gate
- AIR-DET-004AI System Observability
- AIR-DET-011Human Feedback Loop for AI Systems
- AIR-DET-021Agent Decision Audit and Explainability
- ETSI EN 304 223
- 5.1.4-1Capability for human oversight designed in and maintained.
- 5.2.1-1Full inventory of assets, including their dependencies and connections.
- 5.2.4-1Developers keep an audit trail of system design and post-deployment maintenance plans and offer it downstream.
- 5.4.2-1Operators log system and user actions.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
What it makes you log
What the log must hold
System identity
Logging duty
Article 8 requires the developer of a sovereign and/or national large foundation model to (1) take organisational and technical security measures, (2) define operating rules (restrictions, conditions of use, updating and decommissioning), and (3) maintain technical documentation describing the model's key parameters and limitations, to the extent needed to assess the safety of its application. Item (3)'s verb is "вести" (maintain/keep), and the clause never uses "log", "record", "event recording" or "audit trail"; it requires demonstrating the model's safety-relevant characteristics through documentation kept to a stated purpose rather than a named log or record, which is the implicit pattern.
- Kind
- Implicit
- As of
- Provision
- Art. 8(3)
What this law does
Article 8 of Federal Law No. 243-FZ, signed , takes effect on .
It requires the developer of a 'sovereign' or 'national' large foundation AI model to take organizational and technical measures to secure the model, to define rules for the model's operation including restrictions, conditions of use, updating, and decommissioning, and to maintain technical documentation describing the model's key parameters and limitations to the extent needed to assess the safety of its application.
A 'developer' for these purposes is an individual entrepreneur or a legal entity that designs, trains, or modifies the model.
Per Article 6, a 'sovereign' model must be developed, with its characteristics determined and changed at every lifecycle stage, by a Russian legal entity, with the whole development cycle including training fully technically reproducible by that developer, user-query processing and data storage kept in Russian-located, Russian-owned data centers, and confirmed compliance with Russian legislation and 'traditional Russian spiritual and moral values'.
A 'national' model shares the same developer-control, data-center, and compliance-confirmation requirements, but may incorporate components developed abroad, including other developers' foundation models, provided they are distributed under an open license.
When LexLint raises it
When your app profile says your app trains models.
Back to the example · Lint your app
Page updated .