The verdict in three sentences
The EU AI Act classifies automated CV screening as a high-risk AI system (Annex III, employment and recruitment), with obligations scheduled from August 2026. For a Berlin recruitment agency receiving 300 applications per job, a compliant tool costs EUR 15,000 to 40,000 depending on whether it buys a market solution or commissions its own. Compliance hinges on four elements: real human oversight, retained logs, bias testing and candidate information, and in Germany, an agreement with the works council.
What the AI Act actually requires
The regulation separates the provider (who develops the tool and places it on the market) from the deployer (the agency using it). An agency buying off-the-shelf software is a deployer. If it commissions a custom tool under its own name, it becomes a provider, with much heavier obligations. Watch the timeline: in late 2025 the Commission proposed, through the digital omnibus, to postpone some high-risk obligations. Check the applicable date when you start, but design the tool to these rules now.
| Obligation | Deployer (bought software) | Provider (custom tool) | 2026 cost range (EUR) |
|---|---|---|---|
| Risk management system and technical documentation | No | Yes | 6,000 to 12,000 |
| Conformity assessment, CE marking, EU registration | No | Yes | 3,000 to 8,000 |
| Human oversight by trained staff | Yes | Yes (to be designed) | 1,500 to 4,000 for training |
| Log retention (minimum 6 months) | Yes | Yes (to be designed) | 1,000 to 3,000 |
| Bias testing and data quality | Check the provider's | Yes | 3,000 to 8,000 |
| Informing candidates and the works council | Yes | Yes | 1,000 to 2,500 |
| GDPR data protection impact assessment | Yes | Yes | 2,500 to 6,000 |
Penalties are serious: up to EUR 15 million or 3% of worldwide turnover for breaching high-risk obligations. Under GDPR Article 22, a candidate cannot be rejected solely by an automated decision: the AI ranks and explains, a human decides. In Germany, a tool that can monitor behaviour or shape selection criteria also triggers works council co-determination under the Works Constitution Act (sections 87 and 95), usually formalised in a works agreement.
2026 budget: buy or build
| Option | Scope | Setup (EUR, excl. VAT) | Annual cost (EUR) |
|---|---|---|---|
| AI module of an existing ATS | CV ranking, configurable criteria | 15,000 to 20,000 (configuration, DPIA, training) | 6,000 to 15,000 in licences |
| Custom AI layer on the existing ATS | Extraction, explainable scoring, dashboard | 25,000 to 35,000 | 4,000 to 8,000 (API, hosting) |
| Full custom tool with compliance file | Provider under the AI Act | 32,000 to 40,000 | 6,000 to 10,000 |
| Annual external bias audit | Analysis by gender, age, presumed origin | Included in year 1 | 3,000 to 6,000 |
| EU hosting and security | Candidate data in Germany or the EU | Included | 1,200 to 3,600 |
An often overlooked criterion is explainability. A tool that shows why a CV is ranked (skills found, years of experience, missing criteria) makes human oversight practical and helps answer candidates who ask for explanations.
Designing human oversight that survives an audit
Oversight is more than a consultant approving a list. It must be documented and workable. Good practice in 2026: the consultant sees ranked CVs but can open any rejected one, a random sample of 5 to 10% of rejected CVs is reviewed every week, and every disagreement between human and AI is logged. Screening criteria are approved in writing for each assignment, with no prohibited variables (age, exact address, photo, family status). German equal treatment law (AGG) already bans these forms of discrimination; AI simply makes evidence easier to produce, one way or the other.
Mini case study
Katrin Weber runs a 12-consultant recruitment agency in Berlin that posts 80 jobs a year and receives an average of 300 applications per job, or 24,000 CVs a year. A manual first pass takes 1.5 minutes per CV, or 600 hours a year. With a custom AI layer at EUR 30,000 and EUR 6,000 a year to run, screening time drops to 0.4 minutes per CV including ranking review and the control sample, or 160 hours. The gain is 440 hours a year. At a fully loaded EUR 60 per hour, that is EUR 26,400 a year: the project pays back in about a year and a half, and consultants spend that time on interviews and client relationships.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
FAQ
Is an agency using a vendor's AI liable?
Yes, as a deployer: it must use the tool as instructed, ensure human oversight, keep logs for at least 6 months and inform candidates. Deployer-side compliance typically costs EUR 5,000 to 10,000.
Do candidates have to be told AI is involved?
Yes. Job ads and the privacy notice must state that an AI tool supports screening and that a person makes the final decision. The agency must be able to explain a ranking on request.
Is works council approval required?
For the agency's own staff, introducing such a tool generally requires works council co-determination where a council exists. Budget 4 to 8 weeks for negotiating a works agreement.
Can a general-purpose large language model screen CVs?
Technically yes, but prompts must be controlled, every call logged, data hosted in the EU and bias tested on at least 1,000 historical CVs before production.
How long does a compliant rollout take?
Allow 8 to 12 weeks for a market module and 12 to 20 weeks for a custom tool with a full compliance file.
Let's scope your project. Tell us your application volume, ATS and compliance requirements: we will price the right option, an indicative budget between EUR 15,000 and 40,000 and a timeline aligned with the AI Act. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
