Mumvera

Our Incident Response Procedure

We follow a structured incident response process aligned with EU AI Act Article 73 reporting obligations:

Severity	Response Time	Action
Critical	Within 2 days	Immediate investigation. Feature disabled if needed. Reported to relevant authority.
High	Within 7 days	Investigation and fix deployed. User notified if contactable.
Medium	Within 15 days	Reviewed and queued for fix. Documented in monitoring log.
Low	Within 30 days	Logged and addressed in next update cycle.

Escalation: Critical and high-severity incidents involving harm or potential harm are escalated to the app owner immediately and, if applicable, reported to the relevant regulatory authority within the required timeframe.

Post-incident: All incidents are reviewed for root cause. Findings are used to improve the scoring engine, recommendations, or AI guardrails. Changes are documented in the AI Transparency page.

Incident Reporting