Conformity score
100%
Ready for notified body
Human override rate
11.4%
Cap 12%
Open findings
2
Both P2
Evidence turnaround
41m
Target 45m
Deadline
Aug 2026
High-risk obligation
Article checks
Art. 9 Risk mgmtPASS
Art. 10 Data govPASS
Art. 11 Tech file96%
Art. 14 HITLPASS
Live queue
Three credit cases sit in human review. Lending Ops can decide; Compliance sees the audit stamp.
High-Risk System Register
Annex III creditworthiness systems in scope
| System | Annex III | Model | Status |
|---|
FRIA Workspace
| Charter right | Exposure | Mitigation | Owner | Status |
|---|---|---|---|---|
| Art. 21 Non-discrimination | Age / postcode proxies in PD | Blocked features + quarterly fairness gate | MRM | Mitigated |
| Art. 8 Personal data | Open-banking cashflow features | Purpose limitation + 90-day retention | DPO | Mitigated |
| Art. 38 Consumer protection | Adverse action notices | SHAP reason codes on every decline | Lending Ops | Mitigated |
| Art. 47 Effective remedy | Contest a scored decision | HITL appeal path, 5-day SLA | Compliance | Watch |
Annex IV Technical File
| Section | Artifact | Hash | Updated | State |
|---|---|---|---|---|
| 1. General description | system-card-v4.pdf | 9f2a…c1 | 2026-07-12 | Locked |
| 2. Development process | mlflow-run-8841.json | b71c…e0 | 2026-07-11 | Locked |
| 3. Monitoring | psi-weekly.csv | c03d…aa | 2026-07-14 | Refreshing |
| 4. HITL procedures | override-sop-v3.pdf | 11ab…90 | 2026-06-02 | Locked |
HITL Override Queue
Human signature required above PD threshold
| Case | Applicant | PD | Model | Reason | Age |
|---|
Fairness & Drift
PSI (age)
0.04
Gate < 0.10
Demographic parity
0.021
Gate < 0.05
Selection 18–30
68%
Selection 31–55
72%
Selection 56+
65%
Telemetry idle. Run a cycle to stamp the weekly PSI pack.
Open Findings
| ID | Article | Title | Sev | Owner | State |
|---|
Audit Ledger
| Time | Actor | Action | Object |
|---|
Signing Vault
Active HSM key
alias/annex3-prod-eu-central-1
AWS KMS · HSM-backed · rotate 90 days · last rotate 2026-06-18
Key policy
Only Compliance Officer and Model Risk can request a new signature. External Auditor can verify, not sign.
Auditor Pack
Packages the locked Annex IV file, last 90 days of the ledger, and the current FRIA map. Fictional data only.
Format