LIVE BUYER TRUST CENTER · LOCUSLABS.TECH/TRUST/ACME-AI-SUPPORT
SHA256-CD13DC55-BBE04EB4 · RULESET 2026.4-EU-OMNIBUSAcme Support Technologies GmbH
System Under Audit: SupportCopilot v3 · Role: DEPLOYER (AI Act) / PROCESSOR (GDPR)
Enterprise customer support conversational copilot that searches internal knowledge bases, summarizes ticket histories, and drafts suggested customer email responses for human agent review.
01 / EU AI ACT CLASSIFICATIONLIMITED RISK ART 50
02 / STATUTORY RISK INDEX55 / 100 (NEEDS_ACTION)
03 / AI MODEL TRAINING POSTUREZero-Retention / No Training
04 / DATA RESIDENCY & AUDIT DATEEEA (Frankfurt) · 2026-10-19
STATUTORY ARTIFACTS (6)
DECLARED SUB-PROCESSORS
OpenAI Ireland Ltd (EU Data Residency), Supabase Frankfurt (AWS eu-central-1), Cloudflare Workers (EU Edge)
DPO / COMPLIANCE CONTACT
compliance@acmesupport.euARTIFACT 01 / EXECUTIVE STATUTORY POSTURE
Executive Summary & Triggered EUR-Lex Citations
This Regulatory Compliance Dossier documents the statutory baseline for SupportCopilot v3, operated by Acme Support Technologies GmbH. Conducted pursuant to Regulation (EU) 2024/1689 (Artificial Intelligence Act), Regulation (EU) 2016/679 (GDPR), Regulation (EU) 2023/2854 (EU Data Act), and Regulation (EU) 2022/2554 (DORA), the system is classified under the EU AI Act as LIMITED_RISK_ART_50.
The organization operates in the legal capacity of a DEPLOYER under Article 3 of the EU AI Act and acts as a PROCESSOR under GDPR Article 4. The system is subject to mandatory transparency obligations under Article 50(1) (human-interaction disclosures) and Article 50(2) (machine-readable marking and watermarking for synthetic media, enforceable by December 2, 2026).
Under Chapter VI of the EU Data Act (applicable since September 12, 2025), customers are contractually guaranteed frictionless switching, standardized machine-readable data export, and zero switching fees prior to January 12, 2027. Declared sub-processors (OpenAI Ireland Ltd (EU Data Residency), Supabase Frankfurt (AWS eu-central-1), Cloudflare Workers (EU Edge)) are governed under GDPR Article 28 data processing addenda and Standard Contractual Clauses.
VERIFIED EUR-LEX CITATION REGISTER (6)
Reg. (EU) 2024/1689 Art. 4 · OBLIGATIONMandatory AI Literacy & Staff Governance Policy (Applicable since 2 Feb 2025)
EUR-Lex Official Text Reg. (EU) 2024/1689 Art. 50(1) & (5) · OBLIGATIONMandatory Disclosure of Direct Human-AI System Interaction at First Exposure
EUR-Lex Official Text Reg. (EU) 2024/1689 Art. 50(2) & Recital 133 · OBLIGATIONMachine-Readable Provenance & C2PA Marking of Synthetic Outputs
EUR-Lex Official Text Reg. (EU) 2016/679 Arts. 28 & 30 · OBLIGATIONProcessor Contractual Addendum (DPA) & Record of Processing Activities (RoPA)
EUR-Lex Official Text Reg. (EU) 2016/679 Arts. 44–46 (Chapter V) · OBLIGATIONThird-Country Transfer Impact Assessment (TIA) & Commission SCCs (2021/914)
EUR-Lex Official Text Reg. (EU) 2023/2854 Arts. 23, 25 & 29 · OBLIGATIONChapter VI Cloud Switching Contractual Clauses & Zero Egress Fee Mandate
EUR-Lex Official Text MAINTAINED STATUTORY DELIVERABLES (8)
- Article 50(1) User Transparency Disclosure Notice
- Article 4 Staff AI Literacy Internal Training Policy
- Article 50(2) Machine-Readable Synthetic Content Marking / C2PA Spec
- Article 30 Record of Processing Activities (RoPA)
- Article 13/14 AI-Specific Privacy Notice
- Article 28 Data Processing Agreement (DPA) & Sub-processor Schedule
- Chapter V Transfer Impact Assessment (TIA) & Standard Contractual Clauses (SCCs)
- EU Data Act Cloud Switching & Zero-Egress Portability Schedule