Demonstrație. Documentele de mai jos sunt șabloane randate cu date demonstrative sau interne. Nu atestă conformitatea acestui site sau a unei firme cu Regulamentul (UE) 2024/1689 și nu sunt aprobate de nicio persoană responsabilă.

DOD-002-FIRMA-DEMONSTRATIVA-1c5c803e · verifică

DOD-002

Risk Classification Policy

Document Information

Field	Value
Document ID	DOD-002
Title	Risk Classification Policy
Repository	RRVI™
Module	02 – Risk Classification
Company	Firmă demonstrativă
Version	0.0.0-demo
Status	Draft (demo, neaprobat)

1. Purpose

The purpose of this policy is to establish the principles, responsibilities and requirements for the classification of Artificial Intelligence systems in accordance with Regulation (EU) 2024/1689 (EU AI Act).

This policy ensures that every AI system used, developed, integrated or deployed by Firmă demonstrativă is consistently assessed, classified and documented according to its regulatory risk category.

2. Scope

This policy applies to:

all AI systems identified in the AI System Inventory;
internally developed AI systems;
third-party AI services;
AI components integrated into products or services;
proof-of-concept AI implementations;
future AI deployments.

3. Policy Statements

Firmă demonstrativă shall classify every AI system before operational deployment.

Risk classification shall be based on:

intended purpose;
deployment context;
affected persons;
degree of autonomy;
human oversight;
applicable provisions of the EU AI Act.

4. Risk Categories

The following categories shall be used.

4.1 Prohibited AI Practices

AI systems prohibited under the EU AI Act shall not be developed, deployed or used.

4.2 High-Risk AI Systems

High-risk AI systems shall be managed according to applicable regulatory obligations, including technical documentation, risk management and human oversight.

4.3 Limited-Risk AI Systems

Limited-risk AI systems shall comply with applicable transparency obligations.

4.4 Minimal-Risk AI Systems

Minimal-risk AI systems shall be documented within the AI System Inventory and periodically reviewed.

5. Review Requirements

Risk classification shall be reviewed whenever:

a new AI system is introduced;
intended purpose changes;
deployment changes;
provider changes;
regulatory requirements change;
significant incidents occur.

6. Roles and Responsibilities

Managing Director

Approves the Risk Classification Policy.

AI Governance Owner

Responsible for:

coordinating risk classification;
maintaining related documentation;
initiating periodic reviews.

AI System Owner

Responsible for:

providing accurate technical information;
notifying relevant changes;
supporting reassessment activities.

Compliance Owner

Responsible for:

monitoring regulatory developments;
ensuring alignment with the EU AI Act;
supporting inspections and audits.

7. Compliance

Compliance with this policy is mandatory.

Failure to classify AI systems appropriately may result in regulatory non-compliance and increased operational risk.

8. References

Regulation (EU) 2024/1689 (EU AI Act)
DOD-001 AI System Inventory Policy
REG-001 AI System Inventory Register
REG-002 Risk Classification Register

9. Approval

Prepared by

[persoană responsabilă, nepublicat]

Company

Firmă demonstrativă

Status

Approved