STEP 01
THE SCOPE
Agree what the review covers
Confirm the workflow, the cohorts, the scoring path, and the data sources the review will pull from.
→COMPLIANCE · BIAS AUDIT · INDEPENDENT REVIEW
Built to survive an audit.
A bias score does not survive examination. A review record does. A named independent reviewer checks the model, the findings carry who reviewed them and under what rights, and compliance, security, and procurement read the same record at once.
WHO REVIEWS
Independent
A named reviewer outside the team that built the model. Not a self-attestation, and not a vendor aligned with one of the labs it serves.
WHAT IT PRODUCES
Three outputs
Executive summary, detailed findings, remediation plan — each carrying who reviewed it and under what rights.
ONE RECORD
One pack
Compliance, security, procurement, and leadership read the same evidence at once. Another reviewer can reproduce it.
INSTRUMENT READOUT · PASS-RATE DELTAS BY SEGMENT
AUDIT SCOPE
The scope is concrete before it begins.
Four checks define what every review opens with. Each is sized to a deliverable and to the team that will read it — agreed before the reviewer touches a single decision.
01
Selection and pass-rate deltas across demographic segments.
↳ CHECK
02
Adverse impact analysis and significance checks.
↳ CHECK
03
Calibration and score-distribution drift checks.
↳ CHECK
04
Data handling: redaction, retention, and audit evidence.
↳ CHECK
THE WALKTHROUGH
Three steps. One audit trail.
Scope. Review. Package. The output is one packet that compliance, security, procurement, and leadership can read at the same time.
STEP 02
THE WORK
Run the review, attach the evidence
A named independent reviewer runs the metrics. Distributions, reviewer notes, and retention controls stay attached to the same record.
→STEP 03
THE OUTPUT
Package one record everyone reads
One packet for compliance review, remediation, and leadership sign-off — and another reviewer can reproduce it.
DELIVERABLES
Three outputs, one record.
01
Executive summary
What was reviewed, what it found, and what it means — for procurement, legal, and security in one read.
↳ DELIVERABLE
02
Findings report
Detailed metrics, slices, intervals, and reviewer notes the audit team can reproduce.
↳ DELIVERABLE
03
Remediation plan
Prioritized fixes, validation steps, and the evidence needed to confirm the fix held.
↳ DELIVERABLE
APPROVAL PATH
What one record actually clears.
STAGE 01
Compliance reviews scope, findings, and open questions against the record.
COMPLIANCE
STAGE 02
Security and procurement inspect the same review pack for diligence and can hand it to a regulator under the EU AI Act, where training-data provenance enforces from August 2026.
SECURITY · PROCUREMENT
STAGE 03
Leadership signs off with the findings, remediation path, and deployment decision attached to one record.
LEADERSHIP
REQUEST THE REVIEW
The record, on request.
An independent reviewer shows what was checked, what it found, and what source material now supports the decision to deploy. Bring the work. Keep the proof. Know what changed.