LIVE BUYER TRUST CENTER · LOCUSLABS.TECH/TRUST/TALENTSCALE-HR-AI
SHA256-60E1018B-D10168D6 · RULESET 2026.4-EU-OMNIBUSTalentScale AI SAS
System Under Audit: TalentScreen Pro · Role: PROVIDER (AI Act) / PROCESSOR (GDPR)
Automated recruitment system that parses candidate resumes, computes competency match scores, and provides ranked shortlists to HR hiring managers for interview scheduling.
01 / EU AI ACT CLASSIFICATIONHIGH RISK ANNEX III
02 / STATUTORY RISK INDEX95 / 100 (COMPLIANT)
03 / AI MODEL TRAINING POSTUREZero-Retention / No Training
04 / DATA RESIDENCY & AUDIT DATEEEA (Frankfurt) · 2026-10-19
STATUTORY ARTIFACTS (6)
DECLARED SUB-PROCESSORS
OVHcloud Roubaix (France), Scaleway Paris (eu-west-par)
DPO / COMPLIANCE CONTACT
dpo@talentscale.euARTIFACT 01 / EXECUTIVE STATUTORY POSTURE
Executive Summary & Triggered EUR-Lex Citations
This Regulatory Compliance Dossier documents the statutory baseline for TalentScreen Pro, operated by TalentScale AI SAS. Conducted pursuant to Regulation (EU) 2024/1689 (Artificial Intelligence Act), Regulation (EU) 2016/679 (GDPR), Regulation (EU) 2023/2854 (EU Data Act), and Regulation (EU) 2022/2554 (DORA), the system is classified under the EU AI Act as HIGH_RISK_ANNEX_III.
The organization operates in the legal capacity of a PROVIDER under Article 3 of the EU AI Act and acts as a PROCESSOR under GDPR Article 4. Operating in an Annex III vertical (EMPLOYMENT_HR_RECRUITMENT), TalentScreen Pro is subject to mandatory conformity requirements under Chapter III. These encompass an Article 9 Risk Management System, Article 10 Data Governance standards, Article 11 Annex IV Technical Documentation, Article 12 automatic event logging, Article 14 human oversight protocols, and Article 72 post-market monitoring.
Under Chapter VI of the EU Data Act (applicable since September 12, 2025), customers are contractually guaranteed frictionless switching, standardized machine-readable data export, and zero switching fees prior to January 12, 2027. Declared sub-processors (OVHcloud Roubaix (France), Scaleway Paris (eu-west-par)) are governed under GDPR Article 28 data processing addenda and Standard Contractual Clauses.
VERIFIED EUR-LEX CITATION REGISTER (8)
Reg. (EU) 2024/1689 Art. 4 · OBLIGATIONMandatory AI Literacy & Staff Governance Policy (Applicable since 2 Feb 2025)
EUR-Lex Official Text Reg. (EU) 2024/1689 Art. 6(2) & Annex III · OBLIGATIONHigh-Risk Classification (EMPLOYMENT HR RECRUITMENT)
EUR-Lex Official Text Reg. (EU) 2024/1689 Arts. 9–15 & Annex IV · OBLIGATIONRisk Management, Data Governance, Annex IV Technical File & Logging
EUR-Lex Official Text Reg. (EU) 2024/1689 Art. 27 · OBLIGATIONFundamental Rights Impact Assessment (FRIA) for High-Risk Deployers
EUR-Lex Official Text Reg. (EU) 2026/1744 Art. 111 · SAFEGUARDSynchronized High-Risk Transition & Simplified Technical File Schedule
EUR-Lex Official Text Reg. (EU) 2016/679 Arts. 28 & 30 · OBLIGATIONProcessor Contractual Addendum (DPA) & Record of Processing Activities (RoPA)
EUR-Lex Official Text Reg. (EU) 2016/679 Art. 35 & Art. 22 · OBLIGATIONMandatory Data Protection Impact Assessment (DPIA) & Automated Profiling Safeguards
EUR-Lex Official Text Reg. (EU) 2023/2854 Arts. 23, 25 & 29 · OBLIGATIONChapter VI Cloud Switching Contractual Clauses & Zero Egress Fee Mandate
EUR-Lex Official Text MAINTAINED STATUTORY DELIVERABLES (10)
- EU AI Act Annex IV Technical Documentation
- Article 9 Risk Management System Policy
- Article 14 Human Oversight Protocol & Kill-Switch Spec
- Article 27 Fundamental Rights Impact Assessment (FRIA)
- Article 72 Continuous Post-Market Monitoring Plan
- Article 30 Record of Processing Activities (RoPA)
- Article 13/14 AI-Specific Privacy Notice
- Article 28 Data Processing Agreement (DPA) & Sub-processor Schedule
- Article 35 Data Protection Impact Assessment (DPIA)
- EU Data Act Cloud Switching & Zero-Egress Portability Schedule