Governance report (preview)

Executive summary

Plausibility indicators, categorization suggestions and anomalies for claims and bookings.

Intended purpose

Support for case handling — every effective booking/decision is approved by a human.

Preliminary risk class

Elevated risk — human review required

Human oversight required

Yes

Governance Readiness

0/8 Controls with evidence/reviewed

Use case profile

Intended purpose

Support for case handling — every effective booking/decision is approved by a human.

Affected groups of persons

natuerliche_personen_mieter, dienstleister

Data sources

personenbezogen_schadensmeldungen, buchungsdaten

AI function

classification, recommendation

Potential impact

oekonomisch_personenbezogen

Jurisdiction

eu-de

Source system

causax

Lifecycle state

Provisionally classified

Risk assessment (preliminary)

Preliminary risk class

Elevated risk — human review required

Confidence of the assessment

high

Ruleset

v0.1.0

Human review required

Yes

Reasoning (rule reference)

• R-ELEV-ECON-01 — Economic impact on natural persons — decision support requires human approval of effective steps.
• R-ELEV-PII-01 — Processing of personal data sources — GDPR principles (purpose limitation, data minimization, data subject rights) must be applied.
• R-LIM-TRANSPARENCY-01 — Generative or recommending AI function — transparency and labeling obligations must be reviewed.

Recommended risk mitigations

• Every effective action (booking, decision, notification) is approved by a human.
• Data minimization: process only governance-necessary categories, no copies of raw data.
• Role-based access control and audit events for every access to sensitive objects.
• Label AI-generated content as such; escalation to a human is possible at any time.

Uncertainty of the assessment

Rule set v0.1 works with internal review heuristics on the EU AI Act, GDPR, Swiss DSG and the UK context. The assessment depends on the completeness of the registry entries and does not replace a legal review.

Policy & control overview

Open gaps

• Record-keeping / logging
• Transparency & labeling
• Lawfulness of processing
• Data minimization
• Data subject rights
• AI literacy of those involved
• Access control
• Audit/evidence chain

Human oversight

Responsible human

Oversight assignment pending — a final responsible human must be named before approval.

Reviewer

—

Review history

No review decisions recorded yet.

Evidence summary

Evidence chain status

invalid (suspected tampering)

Number of evidence events

40

Verification passed

No

PageCipher anchor status

PageCipher integration status

Active (HTTP integration with PageCipher)

PageCipher anchor status

35/40 Anchored

PageCipher anchor reference

pagecipher:4d4872c2390f17ea55a1318100abf149

Last anchoring attempt

2026-09-04T07:26:17.622Z

Open risks & gaps

• 8 open controls without evidence
• Human approval pending

Legal notices (disclaimer)

• This report does not certify legal compliance.
• The risk classification is preliminary and does not replace a legal assessment.
• The legal assessment may require a specialized legal review.
• This report serves governance and compliance preparation on an evidence basis. It does not constitute legal advice, certification, or a conformity attestation.
• Human responsibility remains mandatory; AI does not make automatic decisions about persons.

Appendix

Control catalog

Generation metadata

Generated at

2026-09-04T07:26:17.821Z

Version

0.1.0

Language coverage

100 %

Number of evidence events

959