{"schema_version":"1.0","document":{"title":"Оценка опасности ИИ-системы проверки лица Jolu","version":"1.1","assessed_at":"2026-09-02","next_scheduled_review":"2027-09-02","language":["ru","ky"],"reuse":"without_restriction"},"owner":{"name":"ИП Кожевников Алексей Валерьевич","contact":"privacy@myjolu.com"},"system":{"name":"Jolu Active Face Verification","analysis_version":"active-v3","purpose":"Проверка живости, качества кадров, признаков подмены и сходства с главным фото анкеты как подсказка модератору.","inputs":["eight_camera_frames_for_random_active_challenge","profile_selfie"],"outputs":["face_presence_signal","challenge_completion_signal","quality_score","liveness_score","anti_spoof_score","same_person_score","profile_photo_similarity_score"],"models_and_methods":["face_detection_and_encoding","Facenet512_similarity","MiniFASNet_anti_spoof","rule_based_active_challenge_aggregation"],"age_estimation_enabled_by_default":false,"final_decision_maker":"authorised_human_moderator"},"methodology":{"legal_sources":{"Digital Code of the Kyrgyz Republic, articles 191-197":"https://reestr.dpa.gov.kg/ru/npa/59","Cabinet Resolution No. 770 of 2 December 2025":"https://cbd.minjust.gov.kg/7-48024/edition/42741/ru","Requirements for the danger-assessment methodology":"https://cbd.minjust.gov.kg/230036494/edition/42780/ru"},"steps":["define_intended_purpose_and_reasonably_foreseeable_misuse","identify_affected_people_and_protected_interests","compare_with_manual_verification_without_ai","score_probability_and_impact_before_controls_on_a_1_to_5_scale","document_human_technical_and_organisational_controls","score_residual_probability_and_impact","classify_under_article_194_and_set_review_triggers"],"risk_formula":"probability_1_to_5 multiplied_by impact_1_to_5","levels":{"1-4":"low","5-9":"moderate","10-16":"high","17-25":"critical"},"evidence_reviewed":["application_source_code_and_data_flow","automatic_thresholds_and_failure_paths","human_moderation_workflow","retention_and_access_controls","feature_and_security_tests"]},"classification":{"result":"not_increased_danger_under_current_design","legal_basis":"Article 194(3) of the Digital Code of the Kyrgyz Republic","reasoning":["AI results are advisory and do not approve, reject, ban or determine age.","A technically valid AI response always creates a pending case for a human moderator, including a negative or uncertain result.","A moderator can disagree with the AI result and must record a written justification.","The user can cancel, retry and request an explanation or human reconsideration through protected support."],"important_condition":"The classification changes if an AI output starts making or effectively determining an access, age, moderation or payment decision without meaningful human control."},"risk_register":[{"id":"R1","description":"Ошибочный отрицательный сигнал и задержка допуска","protected_interest":"rights_and_freedoms","initial":{"probability":4,"impact":4,"score":16},"controls":["negative_result_still_goes_to_human_review","human_override_with_written_reason","retry_cancel_and_support_channel"],"residual":{"probability":1,"impact":2,"score":2}},{"id":"R2","description":"Ошибочный положительный сигнал и допуск поддельной анкеты","protected_interest":"rights_safety_and_public_order","initial":{"probability":3,"impact":5,"score":15},"controls":["random_active_challenge","multiple_independent_spoof_and_similarity_signals","mandatory_human_visual_review","complaint_block_and_reverification_controls"],"residual":{"probability":2,"impact":4,"score":8}},{"id":"R3","description":"Неравная точность при разном освещении, устройстве или внешности","protected_interest":"equality_and_rights","initial":{"probability":3,"impact":4,"score":12},"controls":["age_estimation_disabled_by_default","scores_are_advisory_only","plain_capture_guidance_and_retry","human_review_of_uncertain_results"],"residual":{"probability":2,"impact":3,"score":6}},{"id":"R4","description":"Утечка кадров лица или их избыточное хранение","protected_interest":"privacy_and_rights","initial":{"probability":3,"impact":5,"score":15},"controls":["private_storage_and_authenticated_access","telegram_delivery_only_to_individually_bound_active_moderator","telegram_protected_content_and_exact_message_callback_binding","telegram_messages_refreshed_before_deletion_limit","frames_deleted_after_decision_or_within_72_hours","moderator_access_logging_and_minimisation"],"residual":{"probability":2,"impact":4,"score":8}},{"id":"R5","description":"Атака фотографией, экраном, видео или заменой главного фото","protected_interest":"safety_and_public_order","initial":{"probability":4,"impact":4,"score":16},"controls":["active_random_actions","anti_spoof_and_same_person_checks","reference_photo_locked_during_review","human_review_and_post_launch_reports"],"residual":{"probability":2,"impact":4,"score":8}},{"id":"R6","description":"Человек без проверки повторяет рекомендацию алгоритма","protected_interest":"rights_and_freedoms","initial":{"probability":3,"impact":4,"score":12},"controls":["interface_states_that_ai_is_not_the_decision_maker","moderator_must_review_frames","written_human_reason_required_for_approval","individual_explanation_on_request"],"residual":{"probability":2,"impact":3,"score":6}}],"human_control":{"automatic_approval":false,"automatic_rejection":false,"automatic_age_decision":false,"moderator_can_override_ai":true,"written_moderator_reason_required_for_approval":true,"user_channels":{"protected_support_form":"https://myjolu.com/support","privacy_email":"privacy@myjolu.com"}},"data_governance":{"face_frames_storage":"private","face_frames_maximum_retention_hours":72,"telegram_receives_face_frames":true,"telegram_delivery_scope":"protected_album_in_individually_bound_private_moderator_chat","telegram_message_retention_hours":72,"age_document_used_only_after_separate_informed_request":true,"password_or_device_biometrics_received_by_jolu":false},"review_triggers":["any_model_or_threshold_change","new_automatic_decision_or_new_use_purpose","new_data_category_or_external_recipient","material_incident_or_repeated_complaint_pattern","material_change_in_law_or_operating_environment","scheduled_annual_review"],"known_limitations":["No face-recognition or anti-spoof model is error-free.","Lighting, camera quality, pose, occlusion and appearance can affect scores.","The assessment is valid only while AI remains advisory and the stated controls operate in practice.","Exact anti-abuse parameters are not published where disclosure would materially facilitate evasion; an affected user may request an individual explanation."]}