RS-AI-2024-0001
DemoAI Governance Ltd. · ai — an illustrative sample of the obligation-to-decision journey, on fixed example data.
DemoAI Governance Ltd.
DemoAI Governance Ltd. operates ai governance review in scope of the frameworks above.
Applicable Regulations
Triggered Obligations
Regulation → Obligation → Control → Evidence → Decision
AI Act Article 43 requires conformity assessment before deployment of Annex III systems. System currently in production without certification.
Documented evidence demonstrating compliance with High-Risk AI System — Conformity Assessment Missing (EU AI Act).
Fundamental Rights Impact Assessment required under AI Act Article 27 for credit decisioning. Assessment absent.
Documented evidence demonstrating compliance with FRIA Not Completed (EU AI Act).
AI Act Article 14 requires documented human override capability. Current system lacks override audit trail.
Documented evidence demonstrating compliance with Human Oversight Controls Inadequate (EU AI Act).
AI model vendor contract missing DORA-required ICT concentration risk and exit strategy clauses.
Documented evidence demonstrating compliance with DORA ICT Risk — AI Vendor Contract Gap (DORA).
Risk Posture
- Inherent critical risk from ai governance review
Escalate — immediate compliance action required
AI Act High-Risk System — Credit Decisioning Model Without FRIA. 4 regulatory obligation(s) triggered; residual critical risk requires the action(s) below.
Why This Decision?
Decision DEC-AI-01 · Escalate — immediate compliance action required
- Elevated — enhanced due diligence required — Not taken because the required condition was not met: high inherent risk.
- Review — scheduled compliance review — Not taken because the required condition was not met: medium inherent risk.
- Monitor — no immediate action — Not taken because the required condition was not met: low inherent risk.
- EVD-AI-01OBL-AI-01pending
- EVD-AI-02OBL-AI-02pending
- EVD-AI-03OBL-AI-03pending
- EVD-AI-04OBL-AI-04collected
- 'risk_level' was taken at face value from the supplied data.data
- 'suspicious_pattern_flag' was taken at face value from the supplied data.data
- 'source_of_funds_status' was taken at face value from the supplied data.data
- 'cross_border' was taken at face value from the supplied data.data
- 'kyc_status' was taken at face value from the supplied data.data
- Inherent critical risk from ai governance review
Human-review status: pending human review. Deterministic sample scenario for demonstration — not legal advice; a material decision requires an authorised compliance officer.
Deterministic sample — decision support, not autonomous enforcement. Not legal advice.
Operational decision context
High-risk AI system deployed in credit decisioning without FRIA or conformity assessment
AI system deployed in credit decisioning classified as high-risk under EU AI Act Annex III. No Fundamental Rights Impact Assessment (FRIA) on file. Human oversight controls are insufficiently documented. Conformity assessment required before continued deployment.
Recommended next steps
Evidence references
Operating controls
Audit-ready report
Case lifecycle events
- AUD-AI-01case opened
Case opened: open
2024-11-01T10:00:00.000Z
- AUD-AI-02alerts raised
Regulatory alerts raised: 4 alert(s)
2024-11-01T10:30:00.000Z
- AUD-AI-03risk scored
Inherent risk scored: 88 (critical)
2024-11-01T11:00:00.000Z
- AUD-AI-04decision recorded
Decision recorded: DEC-AI-01 → Escalate — immediate compliance action required
2024-11-01T11:30:00.000Z
- AUD-AI-05actions assigned
Remediation actions assigned: 4 action(s)
2024-11-01T12:00:00.000Z
- AUD-AI-06evidence linked
Evidence linked to controls: 1/4 collected
2024-11-01T12:30:00.000Z