The AI Tutor will answer grounded in this lesson's cited source (external: SAP-102) and key concepts โ authority Informational. Not yet enabled.
Run the 30-minute demo
One system, one story. The audience should leave remembering VNT-02 โ Vantera's SuccessFactors candidate-screening system โ and its journey, not seven dashboards. You present as Marcus Feld, Head of AI Governance at Vantera Industrial. Everything is one estate, one identifier, three regulatory lenses.
Before you start: confirm with your TrustedAIGov contact that the demo-vantera-industrial
tenant is seeded in your environment and that you can sign in. The guided teleprompter lives at
/demo/guide and is role-aware for this tenant.
The seven acts (โ32 min; trim Act 1 to hold 30)
- Cold open (2 min) โ the question. "What AI are we running, who owns it, what does the EU AI Act
mean for us? Last year it took six weeks and the answer was wrong twice." Open
/app/home(executive posture) then/app/estate(the governed systems). - Act 1 โ Discover (3โ4 min).
/discovery-centerโ enterprise intake: the estate arrived from SAP application inventory and Ariba vendor-register exports, normalised into candidates. Beat: an M365 admin export surfaced a shadow tool in the review queue (/discovery-hub). Honesty line: "We don't magically scan your SAP systems โ we industrialise what your teams already export." - Act 2 โ Understand (4 min). Open the flagship AI System Record at
/workspace/system/{VNT-02}. Business process, named human owner, lifecycle, and the AI BOM component graph: SuccessFactors module โ SAP-operated ranking model, supplied by SAP SE. Point at the identifier: "remember this." - Act 3 โ Govern (4 min). Same record, governance layer: risk assessment, derived controls, evidence with SHA-256 + expiry + review state. Show one green chain end to end: control โ current evidence โ integrity verify.
- Act 4 โ ISO 42001 (5 min).
/app/aims/journey: scope (works council as an interested party), the same estate and same identifier, SoA with a real exclusion justification, impact assessment for VNT-02 with independent approval, competence, internal audit with findings, CAPA. "Nothing was re-entered โ the AIMS reads the same records." - Act 5 โ EU AI Act (5 min).
/app/euaiact/journeyfor VNT-02: role = deployer; the prohibited add-on screened out under Article 5; Annex III employment category as prospective high-risk (obligations bind 2 December 2027 โ say the date precisely); the voluntary FRIA (/app/euaiact/fria); and Article 50 transparency for Joule and the support chatbot (/app/aims/transparency) โ a duty that is live today. - Act 6 โ Something goes wrong (4 min).
/app/aims/serious-incidents: the support chatbot gave wrong safety guidance โ incident record, awareness date, the derived statutory clock, and the assessment that it is not Article 73-reportable (not high-risk; Annex III not yet in force). Then the CAPA, the change-control record (/app/aims/change-control), and a planted control weakness on VNT-03 caught by the evidence-expiry engine, sitting in/workspace/queue. - Act 7 โ Assure (4 min, close). Management review on a frozen snapshot; the auditor's PBC
workspace;
/app/deliverablesโ download the signed dossier ZIP and openmanifest.jsonto show the hash chain. Finish on/app/euaiact/posture. Last line: "Six weeks and wrong twice โ versus this. Same system, same identifier, three regulatory lenses."
Access
The demo runs in the customer application (not this Learn site): app.trustedaigov.io. Every act degrades gracefully to its JSON API if a page misbehaves โ a useful fallback, not a talking point.
Q&A traps to prepare: SAP Agent Hub โ "a complement; we'd ingest its inventory, it has no
ISO/Act workflows." Is this SAP-certified? โ "not required for this architecture; nothing touches
your SAP systems." The full act-by-act narration is in the /demo/guide teleprompter.