Governance record for AI systems

Move deals forward with credible AI assurance.

Reduce deal friction by giving buyers current evidence of how each AI system is owned, governed and reviewed.

14-day trial
No credit card required
Data hosted in the UK
app.humanwox.com / registry
Live
AI system registry
CivicNote
Assurance
86/100
SystemRiskScore
Case Summary Assistant
AIS-014 · Current
High92
Meeting Transcription
AIS-021 · Current
Limited84
Case Triage Assistant
AIS-027 · Review due
High61
Document Extraction
AIS-033 · Current
Minimal78
RiskControlEvidenceDecisionReview
Assurance report issued
Tamper-evident · verified
Always current
Records maintained as systems, risks and controls change.
Accountable owner
Every system tied to accountable business, technical and risk owners.
Evidence-backed
Controls linked to signed, timestamped and reviewable evidence.
Assurance-ready
Framework overlays and shareable reports for ISO/IEC 42001 and beyond.
Customer assurance

Assurance at the speed of the deal.

Enterprise buyers now assess AI systems the way they assess security. Deals slow when the answers live in scattered documents. HumanWox turns the maintained record into the answer.

01
Security review arrives

A buyer sends an AI questionnaire mid-cycle, covering ownership, risk classification and human oversight.

02
Answer from the record

Responses are drawn from the maintained record for that system, not reassembled from documents and email.

03
Share the assurance report

The buyer receives a structured, signed assurance report showing the system, its owners, risks, controls, evidence, decisions and review history. They verify it themselves at verify.humanwox.com with no login and no account.

Assurance report
Issued 10 Apr 2026
AI system
Candidate Screening Assistant

CivicNote Ltd · Procurement review

Lifecycle
In production
Assurance
86/100
Latest review
14 Apr 2026
  • RSK-014Inaccurate ranking reaches a hiring decisionHigh
  • CTL-108Mandatory human approval before offerRequired
  • EVD-341Review logs, approval rates and rejectionsCurrent
Tamper-evident · verified at verify.humanwox.com
03 / Demonstrate

Make governance verifiable.

Produce a report the auditor, the customer and the board can each rely on, drawn from the same record. Every assurance report is signed and independently timestamped, and the reader verifies it themselves at verify.humanwox.com with no login and no account.

Framework coverage is calculated from the risks, controls and evidence the team already maintains, and shows gaps honestly rather than a flattering percentage.

Assurance report
Candidate Screening Assistant, as of 10 Apr 2026
Scope
Systems, risks, controls, evidence, decisions
Signed by
HumanWox, on behalf of the organisation
Timestamp
eIDAS advanced, 10 Apr 2026 14:22 UTC
Manifest
sha-256 · 9c1a…f8d2
Verify at
verify.humanwox.com/r/UA-2026-04
No login required. Anyone with the link can verify the signature and timestamp.
Framework coverage, ISO/IEC 42001
Live catalogue
  • Clause 4, Context
    8 covered1 partial0 gap
  • Clause 5, Leadership
    5 covered2 partial0 gap
  • Clause 6, Planning
    6 covered1 partial2 gap
  • Clause 7, Support
    9 covered2 partial1 gap
  • Clause 8, Operation
    11 covered3 partial2 gap
  • Clause 9, Evaluation
    4 covered2 partial1 gap
  • Clause 10, Improvement
    3 covered1 partial0 gap
EU AI Act catalogue also live. Unknowns read as gaps, never as flattering percentages.
The connection

One connected record. Multiple outcomes.

Customer assurance and audit readiness are not separate programmes. They are outputs of the same maintained AI accountability record, read through different lenses.

At the centre
The maintained AI system record
  • Systems and accountable owners
  • Risks and applicable controls
  • Signed, timestamped evidence
  • Decisions and review history
Maintained once, read six ways
Customer assurance

Current answers for buyers assessing your AI systems.

Procurement

Questionnaires and vendor reviews answered from one source.

Audit readiness

Evidence, decisions and reviews ready for examination.

ISO/IEC 42001

Clause coverage calculated from the record as maintained.

EU AI Act obligations

Obligations tracked per system against its classification.

Leadership reporting

Portfolio status, exposure and overdue work for the board.

Operations

Maintain audit and assurance readiness.

HumanWox helps organisations maintain a connected record of risks, controls, evidence, decisions and reviews for customer due diligence, audits and regulatory review as AI systems change.

The register holds every system and its owners. Attention items surface expiring evidence, overdue control tests and pending decisions before they lapse.

HumanWox / Register
4 systems
AI systemOwnerRiskLifecycle
Candidate Screening AssistantR. PatelHighIn production
Support CopilotM. OwenLimitedIn production
Contract Clause ExtractionS. AhmedLimitedIn review
Onboarding Recommendation ModelJ. ByrneLimitedPiloting
Attention required
  • Evidence expires in 6 days
    Candidate Screening Assistant
  • Control test overdue
    Support Copilot
  • Deployment approval pending
    Onboarding Recommendation Model
01 / Establish

Assign business, technical and risk ownership.

Register each AI system with its purpose, classification and lifecycle status. Assign the people accountable for it: a business owner, a technical owner and a risk owner, together with the reviewers responsible for oversight.

Leadership and auditors can see which systems are governed and who holds responsibility for each.

Systems / Candidate Screening Assistant
High riskv3.2
Purpose
Rank and shortlist applicants for enterprise recruitment customers.
Lifecycle
In production, monitored monthly
Classification
High risk under Annex III, employment and worker management
Parent system
Recruitment Platform
Owners
Business owner
R. Patel
Head of Product
Technical owner
A. Nakamura
Lead ML Engineer
Risk owner
S. Ahmed
Head of Security and Compliance
Reviewers
  • D. Cole, Responsible AI LeadQuarterly
  • L. Fernández, Internal AuditAnnually

System profile. Ownership, classification and reviewers on the record.

Accountability Chain

Connect every decision to its basis.

Link risks, controls, evidence, decisions and reviews so each assurance claim can be traced to the record that supports it.

  1. 01RSK-021
    Risk

    Inaccurate summary reaches a case record.

  2. 02CTL-108
    Control

    Mandatory human approval before a summary is saved.

  3. 03EVD-341
    Evidence

    Review logs showing approval rates and rejections.

  4. 04DEC-088
    Decision

    Human review retained after the March model change.

  5. 05REV-040
    Review

    Quarterly product review, 14 April 2026.

Start maintaining audit and assurance readiness.

Register AI systems, assign ownership and maintain the record behind customer assurance, audits and governance obligations.

14-day trialFull access, no limits
No credit card requiredCancel any time
UK hostedData hosted in the UK