AI inventory
Format: XLSX + JSON + Ed25519 signature
4 worksheets: Inventory (typically 8-15 system rows), Risk_Classification with a colour-scale decision tree, Article50_Obligations per system, Subprocessor_DataFlow. The JSON export validates against m1-inventory-v1.schema.json, so it can be imported into other tools.
Article 4 register
Format: DOCX + Ed25519 signature
12-18 pages: a matrix of 10 roles × literacy modules, 5 HR-tech use cases, a 12-month training roadmap with 4 quarterly milestones, an attestation form ready to sign, and at least 6 named sources/URLs.
Role-based controls memo
Format: DOCX + Ed25519 signature
14-20 pages: a RACI of 11 roles × ~25 activities, a 4-stage approval workflow (fast lane ≤72 h, full process ≤14 days), 6 incident categories × 4 SLA tiers, with the works council included where relevant.
Gap analysis
Format: XLSX + Ed25519 signature
A 50-point checklist against the Article 6-15 obligations, a severity rating per item (CRITICAL/HIGH/MEDIUM/LOW), a quarterly remediation plan, and every relevant Article cited per gap.
↓ Download the sample Annex IV PDF (sample-annex-iv-acmehrtech.pdf)