When an enterprise customer or investor sends an AI or security questionnaire, the answer is not a PDF of promises — it is source-referenced, status-marked answers per question. Below are four anonymised sample entries in the format Module 2 is delivered in: question, answer, evidence reference, legal source and an honest status.
SIG-style question (paraphrased) · #A.1
Does your organization maintain a documented inventory of AI systems used in service delivery?
Answer: Yes. Our AI inventory documents each AI system with its purpose, supplier/model, data categories and our role under the AI Act (provider or deployer). The inventory is maintained as part of the Article 4 register and updated when the product changes.
Evidence: AI inventory v1.2 (annex A) + Article 4 register with roles, responsibilities and training status.
Source: Regulation (EU) 2024/1689, Article 4 (AI literacy, applicable since 2 February 2025) and Article 3 (definitions).
Status: DocumentedCAIQ-style question (paraphrased) · #B.3
Describe the human oversight applied to AI-assisted decisions that affect individuals.
Answer: AI-assisted recommendations in the recruitment flow are not executed automatically: a named HR employee reviews and approves every result before action, and candidates can request a human re-assessment. The process is documented with a decision log and role responsibilities.
Evidence: Human oversight procedure (annex C) + decision log template + role descriptions.
Source: GDPR Article 22 (automated decisions, in force); Regulation (EU) 2024/1689, Article 26 (deployer obligations — timeline: see the AI law clock).
Status: DocumentedAI Act buyer question (typical in an enterprise DDQ) · #C.2
Which of your AI features fall under Annex III (employment), and what is your compliance timeline?
Answer: CV screening and candidate ranking fall under Annex III (employment) and are classified as high-risk. Regulation (EU) 2026/1744 (Digital Omnibus) moves the standalone Annex III high-risk deadline to 2 December 2027. Article 50 (transparency) has applied since 2 August 2026. Our preparation reflects the deadlines in force; the status per system is in the gap analysis.
Evidence: Annex III screening per AI system + gap analysis with an owner and a deadline per item.
Source: Regulation (EU) 2024/1689, Annex III(4); Regulation (EU) 2026/1744 (Digital Omnibus).
Status: PartialNIS2 supplier question (paraphrased) · #D.5
How do you address supply-chain security, cf. NIS2 Article 21(2)(d)?
Answer: Sub-processors are mapped with region, purpose and processor status. Critical suppliers are risk-assessed annually, and contractual security requirements — including incident notification and audit access — are documented per supplier.
Evidence: Sub-processor list with regions + supplier risk assessment form + contract requirements matrix.
Source: NIS2 Directive, Article 21(2)(d); Danish Act no. 434 of 6 May 2025.
Status: DocumentedA verifiable deliverable
Every deliverable is cryptographically signed (Ed25519) and can be verified in the browser. Example of a signature block (illustration — the values below are placeholders, not a real signature):
bundle: pep-2026-XXXX.zip
sha256: 9f4c...e21a (example)
ed25519: 5b07...c93d (example)
verify: powerquant.eu/verify
Real deliverables are verified at powerquant.eu/verify — the recipient does not need to trust us, only the maths.
The full pack
Module 2 — Procurement Evidence Pack — is a structured answer library covering the AI parts of SIG/CAIQ-style supplier questionnaires and AI Act-derived buyer questions. Every answer is delivered as above: source-referenced, status-marked and signed — tailored to your vertical (e.g. HR tech). Fixed price EUR 3,499, delivery in 14-21 days, EU-hosted. If you only have one urgent questionnaire, there is a smaller entry point: Questionnaire Answers at a fixed EUR 649 (up to 15 AI questions, delivered within 72 hours on weekdays) — fully credited if you upgrade to Module 2 within 30 days.
General information — not legal advice. PowerQuant ApS (CVR 46274067) is a technical documentation provider and delivers compliance documentation; for legal interpretation we refer you to a specialised IT/AI law firm. Questions in SIG/CAIQ style are paraphrased illustrations, not reproductions of the licensed questionnaires.
