DORA — Digital Operational Resilience Act
Art. 9 — ICT Risk Management
9/9 ICT policy checks applied at runtime. Full action log retained with tamper-evident hash. Retention policy: 5 years.
COMPLIANT
Art. 12 — Logging
All events captured in real time with timestamps, input/output hash, and decision rationale. Annex IV format satisfied.
COMPLIANT
Art. 28 — Third-Party ICT
2 registered providers verified. 1 unregistered endpoint detected (api.altdata-verify.io). Contractual arrangement required before next run.
ACTION REQUIRED
EU AI Act — High-Risk System (Annex III — Creditworthiness)
Art. 12 — Logging
9/9 decisions logged with full input context, model version, confidence scores.
COMPLIANT
Art. 13 — Transparency
Decision rationale captured at each step. Disclosure record maintained for APP-2847-X.
COMPLIANT
Art. 14 — Human Oversight
Escalation triggered on credit score threshold breach. Human review queue assigned. Override capability active.
UNDER REVIEW
Art. 17 — Quality Management
Model v2.1 deployed under CM ref REF-CM-0091. Bias monitoring active. Last validation: 2026-03-14.
COMPLIANT
NIS2 — Network & Information Security Directive
Art. 21 — Security Measures
All data access via TLS 1.3. No PII in plaintext. Minimum-necessary field scoping confirmed.
COMPLIANT
Tracient Audit Certificate
This evidence pack was generated automatically by Tracient v1.0 and has not been manually edited.
Pack hash: —
Generated: — · Organisation: Horizon Capital · Agent: LoanGuard AI v2.1
This document constitutes a tamper-evident audit record for submission to competent authorities under DORA Art.12, EU AI Act Art.12, and NIS2 Art.21.