SmartAssistant and the EU AI Act
SmartAssistant uses machine learning to match candidates to open roles based on their profiles. When this matching influences which candidates recruiters see and engage with, it is making a consequential decision about who gets considered for employment — placing it squarely in Annex III Category 4 high-risk territory.
The key question is not whether a human ultimately makes the final hire decision. It is whether AI is used at any stage to filter, rank, or recommend candidates. If SmartAssistant determines whose CV a recruiter sees, that screening step is high-risk.
Frequently asked questions
We only use SmartRecruiters for job posting and pipeline tracking — no AI. Are we in scope?
No. If you use SmartRecruiters purely as a workflow tool — posting jobs, tracking candidates manually, scheduling interviews — and have no AI scoring or matching features enabled, you are not deploying a high-risk AI system. Document this clearly. The obligation arises only when an AI model produces assessments or rankings about specific individuals.
SmartRecruiters says they are GDPR compliant. Does that cover the EU AI Act?
No. GDPR compliance and EU AI Act compliance are separate obligations with different scopes. GDPR covers data protection; the EU AI Act adds requirements specific to AI systems — transparency, human oversight, and technical documentation that go beyond what GDPR requires. A vendor being GDPR compliant tells you nothing about their EU AI Act compliance status.