Compliance
An audit-ready evidence pack, mapped to the controls you report on.
Decionis turns your governed decisions into proof for EU AI Act, GDPR, and SOC 2 — human oversight, record-keeping, and transparency, each backed by a signed Decision Dossier. Below is a live example from a vendor-payment workflow.
Compliance evidence pack
Vendor payments
Your governed decisions, mapped to named controls — downloadable proof for risk and compliance.
- Decisions recorded
- 8
- Actions blocked
- 0
- Actions escalated
- 4
- Human-oversight events
- 5
- Signed records
- 8
EU AI Act
Art. 14 Human oversight | Decionis escalates risky actions to a human and records overrides instead of executing autonomously. High-risk AI decisions must allow effective human oversight and intervention. | 5 |
Art. 12 Record-keeping | Every decision is signed into a Decision Dossier and preserved in the Execution Ledger. Automatic logging of events over the system's lifetime. | 8 |
Art. 13 Transparency | Each dossier states which policy version applied and the reason for the verdict (reason codes). Operation must be transparent enough to interpret outputs. | 8 |
GDPR
Art. 22 Automated decision-making | Escalation and override paths put a human in the loop before consequential actions. Right to human intervention in solely automated decisions. | 5 |
Art. 30 Records of processing | The Execution Ledger is an organisation-wide record of every governed decision. Maintain records of processing activities. | 8 |
Art. 5(2) Accountability | Signed, verifiable dossiers provide tamper-evident proof of each decision. Demonstrate compliance with the processing principles. | 8 |
SOC 2
CC8.1 Change approval | High-risk actions are policy-gated and blocked or escalated before execution. Changes are authorized before implementation. | 0 |
CC7.2 Monitoring & audit trail | Every decision produces a signed dossier retained in the ledger for audit. Activities are logged and reviewable. | 8 |
Every figure is backed by a signed, verifiable Decision Dossier. Generated in shadow mode — no live system was changed.