Statement on EU AI Act compliance

Simployer

Trusted HR technology — transparent, secure, and responsible by design.

 

Commitment to responsible and compliant AI

Simployer is committed to developing and using Artificial Intelligence (AI) technologies responsibly, transparently, and in accordance with the EU Artificial Intelligence Act (Regulation (EU) 2024/1689). The AI ​​Act has already entered into force in the EU and the regulations will be introduced into Norwegian law. Norwegian businesses should therefore start preparations now.

Our mission is to ensure that all AI-enabled features within the Simployer HR platform support fairness, accountability, and facilitates human oversight, while empowering our customers to build more efficient and inclusive workplaces.

 

Scope and applicability

Simployer acts in two primary roles under the AI Act:

Role	Description	Key Obligations
AI Provider	Simployer develops and offers HR software containing AI-powered features (e.g., digital assistants, HR analytics, recommendations).	Conformity assessment, technical documentation, risk management, data governance, transparency, and CE marking (Articles 9–15).
AI Deployer (Operator)	Simployer uses certain AI systems internally (e.g., automation tools, analytics).	Responsible use, incident reporting, human oversight, and monitoring (Articles 14 and 61).

 

Certain functionalities in the Simployer HR platform may be classified as “high-risk AI systems” under Annex III, point 5 of the EU AI Act, due to their potential influence on employment decisions and HR processes.

 

Governance framework and alignment

Simployer operates a formal Information Security Management System (ISMS) aligned with ISO/IEC 27001:2022 and GDPR requirements.

While the company is not yet ISO 27001 certified, certification is a defined target within Simployer’s 2026 compliance roadmap. The ISMS framework already incorporates ISO control principles for:

• Data governance and quality management (AI Act Art. 10; GDPR Art. 5)

• Transparency and explainability (AI Act Art. 52; GDPR Art. 13)

• Human oversight and accountability (AI Act Art. 14; GDPR Art. 22)

• Technical documentation and traceability (AI Act Art. 11; GDPR Art. 30)

 

Key measures implemented

Simployer’s AI compliance program integrates risk management, transparency, and control verification as part of its existing security and privacy framework.

Measure	Description
AI Governance Policy	Defines ethical and operational standards for AI lifecycle management, transparency, and fairness. Overseen by Security & Legal.
AI Risk Register	Maintains a complete inventory of AI systems, their risk level, training data, bias testing, and control ownership.
Human Oversight Procedures	AI-generated HR recommendations are always facilitated for reviewed by a human before any action is taken.
Transparency to Users	When AI features are in use, the user is informed through on-screen disclaimers.
AI Documentation and Testing	Technical documentation and bias testing prepared for conformity assessment under the AI Act.
Third-Party Model Oversight	AI foundation models (e.g., Azure OpenAI) are reviewed for compliance, with conformity declarations to be obtained when available. Customer data or personal data are never used to train models.
Incident and Post-Market Monitoring	AI incidents and bias reports are logged in Simployer’s compliance platform and linked to corrective actions.

 

 

Organizational responsibilities

Simployer’s AI compliance program is jointly managed by:

• Chief Information Security Officer (CISO) – governance, risk, and technical controls

• Data Protection Officer (DPO) – alignment with GDPR and privacy-by-design principles

• Chief Product Officer (CPO) – risk classification, model documentation, and conformity tracking

This cross-functional structure ensures that Simployer’s AI systems are:

• Transparent – users are informed about AI involvement in outputs and decisions

• Accountable – humans retain final decision-making authority

• Secure and fair – AI models are tested for bias, robustness, and misuse prevention

 

Transparency and Contact

Simployer will continue to update this statement as the AI Act implementation progresses.

For questions or requests for documentation, please contact:

📧 compliance@simployer.com