Screen reference
AI governance
Inventory your AI systems, classify them under the AI Act categories and follow their obligations.
What the screen is for
The app helps to inventory and track: it does not make a system compliant and never says a system complies with the AI Act. A classification result is an aid to the inventory, not legal advice; the obligations listed are short labels, not the text of the law.
Who can do what
| Action | Reader | Compliance manager | Jira administrator |
|---|---|---|---|
| Read the register and records | yes | yes | yes |
| Read a system's log | no | yes | yes |
| Add, edit, classify, write the impact assessment | no | yes | yes |
| Approve a system or its assessment | no | yes, not their own | yes, deviation logged |
Step by step
- "Add an AI system": name, purpose, provider, your role under the AI Act (Provider, Deployer, Importer, Distributor), data processed, owner (required once the record leaves draft).
- Classify: the questionnaire asks one question at a time on Article 5 (prohibited practices), Annex I, Annex III (sensitive areas, with the Article 6(3) derogation) and Article 50 (transparency). The result is: Prohibited (Article 5), High risk, Transparency or Minimal risk, with the reasons. It is saved in the record and the log.
- Obligations: depending on the category and your role, the list of what to follow. It says what to follow, not that it is done.
- Impact assessment: eight sections (context, affected persons, risks of harm, human oversight…), submitted to a designated approver. It is expected or recommended depending on the classification; the app says "to confirm for your situation".
- Status: Draft, In review, Approved, Retired. It says where your internal review stands, nothing about compliance. An unclassified or prohibited system cannot be approved.
Separation of duties
The author of an assessment does not approve it, and the designated approver does not write it; a system's owner does not approve it. Only an administrator (Administrator role or Jira administrator) can override, and the deviation is logged.
When the system changes
On an approved system, changing the role, purpose, provider or data sends it back to review; changing the role restarts the classification. If the category changes, the impact assessment is redone and the system re-approved.
Known limits
- A system has no designated approver: only its owner is excluded from approving.
- A reclassification that changes the answers without changing the category leaves the system approved.
- The app does not say a system complies, nor that a given obligation applies to you: confirm with your counsel.
Was this page helpful?