Governance report (preview)

Executive summary

An AI-assisted process prepares a structured, explained and uncertainty-flagged assessment for the rental decision (completeness of documents, plausibility and risk indicators). The pilot uses synthetic profiles only; the assessment model itself is not implemented in the pilot but is governed.

Intended purpose

Clarified (v2): Automated individual decisions are technically and organizationally excluded; the appeal channel for affected persons is part of the operating concept.

Preliminary risk class

Near high-risk — mandatory human oversight, external legal review recommended

Human oversight required

Yes

Governance Readiness

2/16 Controls with evidence/reviewed

Use case profile

Intended purpose

Clarified (v2): Automated individual decisions are technically and organizationally excluded; the appeal channel for affected persons is part of the operating concept.

Affected groups of persons

natuerliche_personen_mietinteressenten, mitarbeitende_verwaltung

Data sources

personenbezogen_selbstauskunft, personenbezogen_unterlagen_metadaten, objektdaten

AI function

screening_support, recommendation

Potential impact

zugang_essentielle_leistung, oekonomisch_personenbezogen, diskriminierungsrisiko_zu_pruefen

Jurisdiction

eu-de

Source system

causax

Lifecycle state

Active

Risk assessment (preliminary)

Preliminary risk class

Near high-risk — mandatory human oversight, external legal review recommended

Confidence of the assessment

medium

Ruleset

v0.1.0

Human review required

Yes

Reasoning (rule reference)

• R-HIGH-SCREEN-01 — Screening of natural persons affecting access to an essential service (housing) — near high-risk constellation, mandatory human oversight.
• R-ELEV-ECON-01 — Economic impact on natural persons — decision support requires human approval of effective steps.
• R-ELEV-PII-01 — Processing of personal data sources — GDPR principles (purpose limitation, data minimization, data subject rights) must be applied.
• R-LIM-TRANSPARENCY-01 — Generative or recommending AI function — transparency and labeling obligations must be reviewed.

Open legal questions

• Is access to housing to be classified as an essential private service within the meaning of Annex III of the EU AI Act? External legal review recommended; until clarified it is treated as near high-risk.

Recommended risk mitigations

• Mandatory human review of every individual-case assessment by a named accountable person.
• Bias review and monitoring of the assessment logic before and during use.
• Establish an appeal/correction channel for affected persons (Incident & Appeal Register).
• Data minimization: process only governance-necessary categories, no copies of raw data.
• Every effective action (booking, decision, notification) is approved by a human.
• Role-based access control and audit events for every access to sensitive objects.
• Label AI-generated content as such; escalation to a human is possible at any time.
• Obtain external legal review before any real use (near high-risk constellation).

Uncertainty of the assessment

Rule set v0.1 works with internal review heuristics on the EU AI Act, GDPR, Swiss DSG and the UK context. The assessment depends on the completeness of the registry entries and does not replace a legal review.

Policy & control overview

Open gaps

• Check for prohibited practices
• Risk management system
• Data governance
• Technical documentation (Annex IV-like)
• Record-keeping / logging
• Transparency & labeling
• Accuracy, robustness, cybersecurity
• Lawfulness of processing
• Data protection impact assessment (DPIA)
• Data subject rights
• Bias monitoring
• AI literacy of those involved
• Access control
• Audit/evidence chain

Human oversight

Responsible human

actor_klaus

Reviewer

actor_klaus (reviewer)

Review history

Evidence summary

Evidence chain status

invalid (suspected tampering)

Number of evidence events

63

Verification passed

No

PageCipher anchor status

PageCipher integration status

Active (HTTP integration with PageCipher)

PageCipher anchor status

37/63 Anchored

PageCipher anchor reference

pagecipher:2c25260d08b829c022ebab64e1ce89ea

Last anchoring attempt

2026-09-04T04:54:26.551Z

Open risks & gaps

• 14 open controls without evidence
• Is access to housing to be classified as an essential private service within the meaning of Annex III of the EU AI Act? External legal review recommended; until clarified it is treated as near high-risk.

Legal notices (disclaimer)

• This report does not certify legal compliance.
• The risk classification is preliminary and does not replace a legal assessment.
• The legal assessment may require a specialized legal review.
• This report serves governance and compliance preparation on an evidence basis. It does not constitute legal advice, certification, or a conformity attestation.
• Human responsibility remains mandatory; AI does not make automatic decisions about persons.

Appendix

Control catalog

Generation metadata

Generated at

2026-09-04T05:40:53.414Z

Version

0.1.0

Language coverage

100 %

Number of evidence events

723