{
  "schema_version": "1.0",
  "system_name": "CERTavia Compliance Scanner",
  "systemName": "CERTavia Compliance Scanner",
  "provider": "Litzki Systems LLC",
  "contact": "certavia@litzki-systems.com",
  "disclosure_date": "2026-06-07",
  "purpose": "Deterministic validation of publicly accessible technical infrastructure signals of a domain (80+ parameters) to document technical EU AI Act, NIS2, and DORA compliance. Produces a cryptographically signed result (CERTIFIED or FAILED). Not legal advice, no decisions with legal binding effect.",
  "dataCategories": [
    "publicly accessible DNS and TLS configuration data",
    "publicly retrievable HTTP headers and well-known resources",
    "domain and contact details (email) submitted by the customer on request"
  ],
  "humanOversight": {
    "oversight_model": "human-on-loop",
    "contact": "certavia@litzki-systems.com",
    "escalation_url": "https://certavia.org/kontakt"
  },
  "risk_classification": {
    "risk_class": "limited-risk",
    "classification_basis": "CERTavia is an automated validation system that checks publicly accessible technical signals. It makes no decisions with legal binding effect and does not fall under Annex III high-risk classification.",
    "annex_iii_reference": "Not applicable"
  },
  "human_oversight": {
    "oversight_model": "human-on-loop",
    "contact": "certavia@litzki-systems.com",
    "escalation_url": "https://certavia.org/kontakt"
  },
  "data_governance": {
    "data_sources_declared": true,
    "training_opt_out_url": "https://certavia.org/datenschutz",
    "data_contact": "certavia@litzki-systems.com"
  },
  "technical_documentation_url": "https://litzki-systems.com/sovp",
  "incident_reporting": {
    "reporting_framework": "eu-ai-act",
    "contact_email": "certavia@litzki-systems.com",
    "response_sla_hours": 72
  }
}