HumanOSE Home

Control status (use case)

Claims/accounting decision support · uc_cx_c03

The control status documents the review of the evidence — it does not certify conformity.
Preparation status of applicable controls — not a conformity claim (synthetic).
This report serves governance and compliance preparation on an evidence basis. It does not constitute legal advice, certification, or a conformity attestation.

applicable8

open8

with evidence0

reviewed0

Elevated risk — human review required · not applicable: 0

Control status (use case)

ID	Control	Expected evidence	Status
`euaia_record_keeping`	Record-keeping / logging EU AI Act Art. 12 · EU AI Act	Automatic, traceable event logging (append-only) in place.	Open
`euaia_transparency`	Transparency & labeling EU AI Act Art. 13 / 50 · EU AI Act	AI use is made transparent to affected persons; AI-generated outputs are labeled.	Open
`gdpr_lawfulness`	Lawfulness of processing DSGVO Art. 6 · GDPR	Documented legal basis for the processing of personal data.	Open
`gdpr_data_minimization`	Data minimization DSGVO Art. 5(1c) · GDPR	Evidence that only necessary data categories are processed.	Open
`gdpr_data_subject_rights`	Data subject rights DSGVO Art. 12–22 · GDPR	Processes for access, rectification, objection and appeal by affected persons in place.	Open
`ai_literacy_staff`	AI literacy of those involved EU AI Act Art. 4 · AI literacy	Evidence of sufficient AI literacy of the persons involved in the deployment.	Open
`security_access_control`	Access control ISO 27001 A.9 (Referenz) · Security	Role-based access control and audit logs for sensitive objects in place.	Open
`audit_evidence_trail`	Audit/evidence chain SysTec Evidence Standard (ADR-003) · Audit	Complete, hash-chained evidence trail of the governance-relevant actions.	Open

Open policy controls → · Open risk assessment →