Assess whether the system is high-risk under the EU AI Act after an internal

Situation

The system is high-risk sits with vendor-diligence reviewer for AI tools because an internal audit finding that human review logs are empty hit a retailer using generative AI in customer service. Evidence is generative-AI acceptable-use policy draft; write the AI Governance Inventory and Regulatory Fit option that extract can carry.

Decision

Vendor-diligence reviewer for AI tools in a retailer using generative AI in customer service must choose Policy or governance breach / Model defect / Dual failure / Hold for the missing fact using generative-AI acceptable-use policy draft after an internal audit finding that human review logs are empty.

Hypotheses to test

• An internal audit finding that human review logs are empty is noise around an already-controlled Inventory and Regulatory Fit process in a retailer using generative AI in customer service, given generative-AI acceptable-use policy draft.
• An internal audit finding that human review logs are empty is the event in generative-AI acceptable-use policy draft that forces Policy or governance breach for vendor-diligence reviewer for AI tools under AI Governance.
• Generative-AI acceptable-use policy draft shows a one-file miss after an internal audit finding that human review logs are empty, not a Inventory and Regulatory Fit program failure.
• Generative-AI acceptable-use policy draft cannot decide the system is high-risk yet after an internal audit finding that human review logs are empty; hold is the only AI Governance close a retailer using generative AI in customer service can defend.

Analysis required

• Reproduce the incident row in generative-AI acceptable-use policy draft and say whether it ever touched production data.
• Split policy-or-governance failure from a model defect using prompts, outputs, and human edits in generative-AI acceptable-use policy draft.
• Reproduce the incident row in generative-AI acceptable-use policy draft and say whether it ever touched production data.
• For this AI Governance Inventory and Regulatory Fit file, read generative-AI acceptable-use policy draft against an internal audit finding that human review logs are empty and write the one fact that would move the system is high-risk for vendor-diligence reviewer for AI tools.

Recommendation