Compliance

How FirstLineCoach respects the EU AI Act and the GDPR.

The architectural principle

AI never participates in preparing a coaching session with a specific individual.

The tool draws a clear line between two moments. At session time, when a coach searches for plans to prepare for a session with a specific person, everything is deterministic — no AI. At publication time, when content is being created or published, AI can help — but no specific individual is being assessed. An AI system that influences which coaching approach a specific person receives would fall within scope of Annex III, Point 4(b) of the EU AI Act as a potentially high-risk system. That is why the separation is deliberate.

Coaching session preparation

  • Plan search is fully deterministic: text normalisation, suffix stemming, and token-set matching. No AI, no inference, no probabilistic model.
  • Excluded from the AI Act's scope by Recital 12: rules defined by humans, executed by traditional software.
  • The loop never closes back to the person you're coaching.

Plan design and publication

  • AI assists during vignette capture in /reflect — to help you draft your reflection. You review, edit, and decide whether to save.
  • When a plan is published, AI generates search vocabulary from the plan content, reviewed by a human editor before it enters the search index.
  • AI compares vignettes against existing plans during triage — an editorial tool, not a person assessment.
  • Coaching signals are extracted anonymously — no link to the source vignette, quarter-only timestamps.
  • Every vignette is human-reviewed before it can be adopted as a coaching plan.
  • The voice transcript is deleted immediately when you save. It is never persisted to disk.
  • You can delete any of your vignettes at any time.

EU AI Act (Regulation (EU) 2024/1689)

The tool is limited-risk under the Act's classification. It is not used for employment decisions, performs no biometric categorisation, and runs no emotion recognition in the sense prohibited by Art. 5(1)(f).

Annex III, 4(b)
Covers AI systems intended to allocate tasks based on individual behaviour in employment relationships. This is why plan search at session time is deliberately deterministic.
Art. 50(1)
The /reflect screen makes clear that your voice is transcribed and sent to an AI (Anthropic Claude).
Art. 50(4)
Vignettes are AI-drafted content under human editorial control — you review and save.
Art. 4
AI literacy — this page explains in plain language what the AI does, what it does not do, and why.
Art. 5(1)(f)
The tool does not infer the emotions of the person you're coaching. You describe what you observed; the AI only reorganises your own description.
Recital 12
Plan search is traditional rule-based software — not an AI system.

GDPR (Regulation (EU) 2016/679)

Art. 5(1)(c)
Data minimisation — only the vignette is kept. The transcript is discarded on save. Coaching signals are anonymous.
Art. 5(1)(e)
Vignettes are kept until you delete them. Transcripts are not stored at all.
Art. 6(1)(a)
We process your reflection with your consent. Pressing Save is the consent.
Art. 6(1)(f)
Legitimate interest covers incidental mentions of third parties in your captured speech. The transcript is discarded on save — no personal data from your speech is retained.
Art. 13
This page is the transparency notice.
Art. 17
You can delete any vignette at any time. Deletion is immediate and removes both language versions.
Art. 22
No automated decision is made about you or about the person you're coaching.

Data controller

Ennovate Consulting, Ireland. Contact: cmurphy@ennovateconsulting.ie.

Hosting: Microsoft Azure, West Europe (Ireland). AI processor: Anthropic, under their Data Processing Addendum and EU Standard Contractual Clauses.

An unhandled error has occurred. Reload 🗙