⚠ SAMPLE·AUD-2026-04721·2026-06-09 14:22 UTC·HIGH_RISK — Annex III §4

TalentScreen Pro v3.1

Acme HR Solutions GmbH · HR / Employment decisions

847files

143signals

31findings

18phases

RSA-PSS · SHA-256

Compliance Score

72/100

AlignedSector multiplier: 1.5×ARTICLE_WEIGHTED_V3

Risk classification

HIGH RISK — Annex III §4

This system is classified as HIGH_RISK under the EU AI Act because it makes automated employment decisions affecting natural persons in the EU market. The full 22-article assessment applies, with a sector multiplier of 1.5×.

Makes employment decisionsAnnex III §4

Affects natural personsArt. 6

Automated scoring componentAnnex III §4

Deployed in EU marketArt. 2

GPAI model insideArt. 53

Biometric identificationAnnex III §1

Verdict scale — where this system lands

≥ 85

Statically Aligned

≥ 65

Aligned

THIS SYSTEM

≥ 40

Gap

< 40

Fail

Article breakdown

22 articles assessed

Compliant

Aligned

Gap

Fail

ArticleRequirementScoreCoverageFindingsVerdict

Art. 9

Risk Management

9.4/11

1aligned

Art. 14

Human OversightCritical

5.2/11

6gap

Art. 10

Data Governance

7.1/8

2aligned

Art. 13

Transparency

6.4/8

1aligned

Art. 20

Logging & Traceability

7.8/8

—aligned

Art. 5

Prohibited Practices

7/7

—compliant

Art. 15

Robustness & Security

3/5

4gap

Art. 47

EU DeclarationCritical

0/4

1fail

Art. 11

Technical Documentation

2.4/3

1aligned

Art. 12

Record Keeping

2.7/3

—aligned

Art. 17

Quality Management

1.5/3

3gap

Art. 19

Auto-Generated Logs

2.7/3

—aligned

Art. 72

Post-Market Monitoring

1.6/4

3gap

Art. 27

FRIA

3/3

—compliant

Art. 4

AI Literacy

1.6/2

1aligned

Art. 16

Provider Obligations

2/2

—compliant

Art. 49

EU Database RegistrationCritical

0/2

1fail

Art. 50

AI Output Transparency

3.2/4

1aligned

Findings & remediation

Critical & high-priority findings

3 critical · 2 high · 10 medium · 16 low — click any finding to see the remediation path

26 additional findings (medium/low) included in the full audit bundle

Technical dossier

Annex IV document verification

5 verified1 gap3 missing

Risk Assessmentrisk_assessment.mdArt. 9Verified

Data Governance Policydata_governance_policy.mdArt. 10Verified

Technical DocumentationTECHNICAL_DOC.mdArt. 11Verified

Model CardMODEL_CARD.mdArt. 13Verified

FRIA Reportfria_report.mdArt. 27Verified

Human Oversight ProtocolOVERSIGHT_PROTOCOL.mdArt. 14Incomplete

Robustness Test Suitetests/adversarial/Art. 15Missing

Post-Market Monitoring Planmonitoring_plan.mdArt. 72Missing

EU Declaration of Conformitydeclaration_of_conformity.mdArt. 47Missing

Output bundle

7 outputs generated — every audit

Core

audit.json

Full machine-readable report — RFC8785-Lite canonical

Core

report.html

Standalone visual report, no external dependencies

DevOps

SARIF v2.1.0

GitHub Security tab · VS Code · any CI/CD pipeline

DevOps

SBOM CycloneDX

AI component inventory for supply chain compliance

Legal

Annex IV pack

Pre-filled Annex IV technical documentation templates

Security

checksums.txt

SHA-256 hashes of all output files

Security

RSA-PSS signature

Cryptographic proof — verifiable without Sentinel

Audit serial

AUD-2026-04721

Signature

RSA-PSS · SHA-256 · RFC8785-Lite

Engine

v2.9.0-SEVERITY

Model

ARTICLE_WEIGHTED_V3

Run this on your actual system

Your system. Your audit. In minutes.

Connect your repository and get the exact same format — applied to your actual codebase. Signed, reproducible, legally formatted. Ready for a Notified Body.

Start free audit How it works

Zero code executionRSA-PSS signed22 articles scoredAnnex IV generatedSARIF for CI/CDReproducible output