Do we have to keep a record of the AI tools our employees use?

We recommend it even if the legislation did not require it. Without a list you do not know where company data is going and what an external service is storing about your company. The record is usually a simple table: tool, purpose, who uses it, what data goes into it and who is responsible for it. It helps with security questionnaires from customers and with meeting AI Act obligations.