AI agents become part of your existing IT governance - not a parallel universe.
AI agents deployed in HR processes, personnel decisions, or employee-relevant workflows require oversight by employee representation bodies in most jurisdictions. In Germany specifically, this is a strict legal requirement under the Works Constitution Act (Betriebsverfassungsgesetz) - the most demanding co-determination framework globally.
Most AI deployments treat employee oversight as an organizational problem: a workshop with employee representatives, a governance agreement, a protocol. That is not enough. When the agent makes decisions affecting employees, oversight must be technically enforced - not just agreed upon.
Gosign treats employee oversight as an architectural principle. The Decision Layer technically enforces compliance with governance frameworks (collective agreements, works agreements, or company policies). The audit trail documents every decision. Employee representation bodies can trace what the agent does, why it does it, and when a human intervenes.
Across the EU, employee representation bodies have rights regarding the introduction and use of AI systems that process employee data or influence personnel decisions. In Germany specifically, §87 of the Works Constitution Act grants the works council co-determination rights over "technical facilities designed to monitor the behavior or performance of employees." AI agents that automate HR processes fall under this regulation. Under German law, §90 BetrVG further requires early involvement during the planning phase of new technical systems - not just at go-live.
The US has no statutory equivalent to works councils or co-determination law. Employee oversight for AI typically relies on EEOC anti-discrimination requirements, state-level AI employment laws (e.g., NYC Local Law 144 for automated employment decision tools), and internal corporate governance policies. The Gosign architecture provides the transparency and audit infrastructure that US employers need to demonstrate compliance with these evolving requirements.
The UK retains employee consultation rights under the Information and Consultation of Employees Regulations but does not follow EU co-determination directives post-Brexit. UK GDPR Article 22 provides employee rights regarding automated decision-making. The Gosign architecture satisfies these requirements through its Decision Layer and audit trail.
Every governance framework - collective agreements, works agreements, or company policies - is translated into a rule set in the Decision Layer with version ID, validity date, and scope. The agent automatically checks every decision against stored constraints. If a constraint would be violated, the decision is not executed autonomously.
Not a blanket approval process but architecturally controlled routing. Autonomous decision when: high confidence, low risk, no constraint affected. Human-in-the-Loop when: bias risk, employee oversight topics, low confidence. The routing cannot be bypassed.
Every agent decision generates a complete audit trail entry: timestamp, agent, input, applied rules (with versions), assessment with confidence and risk score, decision path, output, and status. Employee representation bodies - such as works councils, trade unions, or staff committees - can view and filter all decisions.
Audit Trail Entry:
├── Timestamp: 2026-02-20T09:14:22Z
├── Agent: hr-merit-cycle-agent
├── Input: Salary adjustment employee #4711
├── Applied Rules:
│ ├── Collective agr.: TV-V, Version 2025.2
│ ├── Governance: Policy-2024-003, § 4 Para. 2
│ └── Salary Band: Band E3, Range 52,000-68,000 EUR
├── Assessment:
│ ├── Confidence: 0.94
│ ├── Risk Score: low
│ └── Result: Within band, within policy constraint
├── Decision Path: autonomous (no constraint violated)
├── Output: Booking proposal: adjustment +3.2%
└── Status: approvedAgent Operator: Configures agents, changes rule sets (versioned, documented)
HR Specialist: Views agent decisions within their area of responsibility
Employee Representative: Insight into decision patterns, constraint status, audit trail (anonymized where necessary)
Auditor / Internal Audit: Full access to audit trail, evidence, control status
Admin: System configuration, no access to professional decision data
RBAC is enforced at database level via Row-Level Security.
Gosign provides templates for: governance agreements for AI deployment, technical descriptions for employee representatives, logging concepts, and escalation matrices. These are starting points - every governance framework must be individually negotiated to fit your jurisdiction and organizational structure. Gosign provides the technical foundation, not legal advice.
We do not replace governance frameworks. We map them technically.
We do not provide legal advice. We deliver the technical infrastructure.
We do not automate decisions subject to employee oversight without Human-in-the-Loop.
We do not "train" agents on oversight decisions. Agents do not learn uncontrolled.
Built for the most demanding regulatory environment globally - German co-determination law, EU AI Act, and GDPR. This means the Decision Layer meets or exceeds compliance requirements in virtually any jurisdiction.
The Gosign architecture technically ensures that governance frameworks - collective agreements, works agreements, or company policies - are respected.
Employee representation bodies - whether works councils, trade unions, staff committees, or other authorized oversight bodies - can verify every agent decision through the Auditor Portal.
Human-in-the-Loop is enforced where required - architecturally, not optionally.
Agents become part of your existing IT governance - not a parallel universe.
Our article series for decision-makers implementing AI agents in the enterprise.
Yes. The Gosign architecture is built for the most demanding regulatory environment globally - German co-determination law, EU AI Act, and GDPR. Employee representation bodies - whether works councils, trade unions, staff committees, or other authorized oversight bodies - can verify every agent decision through the Auditor Portal. This means the architecture meets or exceeds compliance requirements in virtually any jurisdiction. (US:) In the US, no statutory works council exists; oversight typically falls under EEOC anti-discrimination rules and internal governance policies. (UK:) Post-Brexit, the UK follows its own employment consultation framework rather than EU co-determination directives.
Every agent decision generates a complete audit trail entry. The Decision Layer documents input, rule, assessment, and result. Employee representation bodies - such as works councils, trade unions, or staff committees - can trace every decision through the Auditor Portal.
Yes. Governance frameworks - collective agreements, works agreements, company policies, or internal compliance rules - are mapped as explicit constraints in the Decision Layer. Every constraint is versioned and traceable. Changes to governance frameworks create new constraint versions.
The Decision Layer checks every decision against stored constraints. If a governance framework or works agreement would be violated, the decision is not executed autonomously but escalated to a human.
Decision Layer. Human-in-the-Loop. Audit Trail. Compliant with employee representation requirements.
Book a Meeting