- Critical bucket (9 files): substantive content updates basert på MCP-fetch - enterprise-governance: DSPM front door, AI-app-kategorier (3), single-tenant Entra ID - rag-cost-optimization, observability, ai-services-enterprise, multi-model-strategy: dato-bump - deterministic-cost: Copilot Credits offisiell common currency (2025-09-01), CCCU prepurchase - gpt5-gpt41-pricing: utvidet Copilot Studio modell-lineup (GPT-5.2, GPT-5.3, Claude 4.6, Grok 4.1) - vector-storage, request-batching: dato-bump (DS allerede dekkende) - High batch 1 (21 files, 10-30): Last updated 2026-04→2026-05 dato-bump Substantive Microsoft Learn-endringer var marginale per fetch — kosmetiske oppdateringer. Resterende: high batch 2 (filer 31-53, 23 filer) i ny sesjon. Se NEXT-SESSION-PROMPT.local.md.
31 KiB
Transparency and Documentation - Regulatory and Best Practice Standards
Last updated: 2026-05 Status: GA Category: Responsible AI & Governance
Introduksjon
Transparency and documentation er sentrale prinsipper i Microsofts Responsible AI Standard og krav i emerging regulations som EU AI Act. Dokumentasjon av AI-systemer omfatter både interne governance-verktøy og brukervendte disclosure-mekanismer. Microsoft tilbyr standardiserte rammeverk for å dokumentere AI-kapabiliteter, begrensninger og sikkerhetstiltak gjennom Transparency Notes, model cards, datasheets og Responsible AI scorecards.
Transparency handler ikke bare om teknisk eksportabilitet (model interpretability), men også om organisatorisk accountability — dokumentasjon av design-beslutninger, risk assessments, testing-prosedyrer og ongoing monitoring. Dette sikrer både compliance og stakeholder trust.
Nøkkelkonsepter:
- Transparency Notes: Microsofts standardformat for AI system-dokumentasjon
- Model Cards: Kortfattet beskrivelse av modellens capabilities, limitations og intended use
- Responsible AI Scorecard: PDF-rapport for multi-stakeholder alignment
- Documentation-first approach: Dokumentere before deployment, monitor during operation
Kjernekomponenter
1. Transparency Notes (Microsoft Standard)
Microsofts offisielle dokumentasjonsformat for AI-systemer, designet for å forklare hvordan teknologien fungerer og hva organisasjoner må vurdere.
| Komponent | Innhold | Målgruppe |
|---|---|---|
| What is a Transparency Note? | Definisjon av systemets omfang — teknologi, brukere, påvirkede personer, miljø | Alle stakeholders |
| The basics of [system name] | Hvordan systemet fungerer, key terms, grunnleggende capabilities | Tekniske og ikke-tekniske |
| Capabilities | Hva systemet kan gjøre (konkrete use cases) | Product owners, utviklere |
| Limitations | Technical limitations, operational factors, edge cases | Risk officers, utviklere |
| System performance | Best practices for tuning, evaluation, measurement | ML professionals |
| Evaluating and integrating | Guidance for responsible deployment | Decision-makers |
| Learn more about responsible AI | Lenker til prinsipper, ressurser, training | Compliance teams |
Eksempel fra Azure OpenAI Transparency Note:
- Beskriver model weights, ungrounded content, agentic systems som key terms
- Detaljerer GPT-4, DALL-E 3, Whisper capabilities separat
- Warnings om Computer Use preview security risks
- Best practices for content filters, prompt engineering, human review
Confidence: Verified (MCP: microsoft-learn)
2. Model Cards og Datasheets
Strukturerte metadatabeskrivelser av AI-modeller og datasets. Originating fra akademisk forskning (Mitchell et al. 2019), adoptert av industry som standard practice.
Model Card komponenter:
| Seksjon | Detaljer |
|---|---|
| Model details | Navn, versjon, eier, lisens, training data source |
| Intended use | Primary use cases, out-of-scope use cases |
| Factors | Demographic eller contextual factors som påvirker performance |
| Metrics | Accuracy, fairness metrics, validation methodology |
| Evaluation data | Datasets brukt for testing, data splits |
| Training data | Data sources, preprocessing, filtering |
| Quantitative analyses | Performance across subgroups og scenarios |
| Ethical considerations | Kjente risker, biases, mitigation-strategier |
| Caveats and recommendations | Usage warnings, update-frekvens |
Microsoft implementasjon:
- Azure AI Foundry: Model catalog med built-in model cards for pretrained models
- Hugging Face integration: Model cards synces automatisk
- Custom models: Template for å generere egne model cards
Datasheet komponenter:
- Motivation: Hvorfor ble datasettet samlet?
- Composition: Hva er i datasettet? (instances, labels, features)
- Collection process: Hvordan ble data anskaffet?
- Preprocessing: Cleaning, filtering, transformations
- Uses: Intended tasks, prohibited uses
- Distribution: Licensing, update-schedule
- Maintenance: Hvem opprettholder datasettet?
Confidence: Verified (MCP + Baseline)
3. Responsible AI Scorecard
PDF-rapport designet for å dele model- og data-innsikter mellom tekniske og ikke-tekniske stakeholders, spesielt for auditability og compliance.
Primære brukstilfeller:
| Rolle | Bruk av Scorecard |
|---|---|
| Data scientists | Ekstrahere insights fra Responsible AI dashboard for deployment approval |
| Product managers | Sette target performance/fairness metrics og verifisere at modellen møter dem |
| Compliance officers | Review for regulatory compliance (EU AI Act, sector-specific regler) |
| Auditors | Arkiverte scorecards i Azure ML Run History for retrospective review |
Komponenter i Scorecard:
- Model overview: Architecture, training data, intended use
- Fairness assessment: Performance disparities across sensitive groups (gender, ethnicity, age)
- Model interpretability: Feature importance (global/local explanations)
- Error analysis: Error rates per cohort, confusion matrices
- Counterfactual analysis: What-if scenarios (e.g., "loan approved if income +10k")
- Causal inference: Causal vs correlational relationships i features
- Data quality: Dataset statistics, missing values, outlier analysis
Customization:
- Target values: Akseptabel accuracy, max error rate per subgroup
- Cohort analysis: Disaggregated performance for identified risk groups
- Narrative sections: Fritekst-forklaringer for decisions og mitigations
Status: Public preview (Azure ML) — anbefalt for production use med awareness om SLA-limitations.
Confidence: Verified (MCP: microsoft-learn)
4. Governance Documentation Requirements
Microsoft Responsible AI Standard krever dokumentasjon på flere nivåer av AI lifecycle:
Pre-deployment:
| Fase | Dokumentasjonskrav |
|---|---|
| Impact Assessment | Dokumentere goals, requirements, practices for each Responsible AI principle |
| Risk discovery | Red teaming reports, bias testing results, safety evaluations |
| Model selection | Justification for model choice, alignment med risk tolerance |
| Data vetting | Datasheet for training data, sensitivity classification |
| Third-party tools | Vetting-report for external APIs/SDKs, security/compliance review |
Post-deployment:
| Fase | Dokumentasjonskrav |
|---|---|
| Monitoring | Performance dashboards, drift detection thresholds, retraining triggers |
| Incident response | Escalation paths, shutdown authorities, user notification procedures |
| Audit trails | Decision logs, approval workflows, configuration changes |
| Transparency reports | Public disclosure av AI usage, incident statistics, improvements |
Template tilgjengelig: Microsoft Responsible AI Standard v2 (juni 2022) inneholder checklists og templates for Impact Assessments.
Confidence: Verified (MCP: microsoft-learn)
Arkitekturmønstre
Mønster 1: Transparency-by-Design Pipeline
Integrer dokumentasjon som mandatory checkpoints i AI development lifecycle:
[Design] → Impact Assessment → [Development] → Model Card → [Testing]
→ Red Team Report → [Deployment] → Transparency Note → [Operations]
→ Monitoring Dashboard → [Incident] → Incident Report
Implementasjon i Azure:
- Azure DevOps: Gates for approval av model cards før deployment
- Azure ML: Auto-generate Responsible AI scorecard etter hver training run
- Azure AI Foundry: Built-in evaluation tools med export til PDF
- Microsoft Purview: Data lineage tracking for governance
Anti-pattern: Dokumentere etter deployment ("doc debt") — fører til incomplete/inaccurate documentation.
Mønster 2: Multi-Stakeholder Scorecard Review
Bruk Responsible AI Scorecard som kommunikasjonsverktøy mellom teams:
Workflow:
- Data scientist genererer scorecard fra Azure ML dashboard
- Product manager reviewer mot target metrics (accuracy, fairness)
- Legal/Compliance sjekker mot regulatory requirements
- Risk officer vurderer residual risk etter mitigations
- Approval committee tar go/no-go decision basert på scorecard
Tooling:
- Azure ML Run History: Archive alle scorecards med versioning
- Power BI: Dashboard for å tracke metrics across models
- Teams/SharePoint: Collaborative review med comments
Mønster 3: Layered Disclosure
Tilby ulike nivåer av transparency basert på audience:
| Audience | Disclosure format | Innhold |
|---|---|---|
| End users | In-app notifications, FAQs | "This feature uses AI", data collection disclosure, opt-out links |
| Developers | API documentation, model cards | Technical capabilities, limitations, sample code |
| Regulators | Transparency Notes, audit reports | Full system architecture, testing procedures, compliance mapping |
| General public | Transparency reports (annual) | Aggregate statistics, policy updates, incident summaries |
Azure implementasjon:
- Azure OpenAI: Content Safety labels i API response
- Copilot Studio: "Powered by AI" disclosure i chat interface
- Azure Portal: Model catalog med filterable model cards
Mønster 4: Living Documentation
Dokumentasjon som evolves med systemet:
Prinsipp: Transparency Notes og model cards er ikke "set and forget" — de må oppdateres når modellen retraines, capabilities endres, eller nye risks oppdages.
Maintenance triggers:
| Trigger | Oppdatering |
|---|---|
| Model retrain | Oppdater metrics, training data details i model card |
| New feature | Expand capabilities-seksjonen i Transparency Note |
| Incident | Legg til caveats/warnings, oppdater limitations |
| Regulatory change | Review compliance-seksjoner, update legal disclosures |
| User feedback | Clarify confusing sections, add FAQs |
Versioning: Bruk semantic versioning (v1.0, v1.1, v2.0) og publish changelog.
Azure tooling:
- Azure DevOps: Version control for documentation
- Azure ML: Model versioning linked to scorecard versions
Beslutningsveiledning
Når kreves formell Transparency Note?
Obligatorisk:
| Scenario | Rationale |
|---|---|
| Generative AI (LLMs, image generation) | Høy risiko for ungrounded content, bias, safety issues |
| High-risk AI systems (EU AI Act definition) | Legal requirement for transparency dokumentasjon |
| Customer-facing AI | User disclosure requirements, trust-building |
| AI med autonomous actions | Accountability for decisions made without human-in-loop |
Anbefalt (ikke obligatorisk):
| Scenario | Rationale |
|---|---|
| Internal productivity tools | Best practice for organizational accountability |
| Low-risk AI (non-generative) | Simplified transparency documentation akseptabelt |
Ikke nødvendig:
- Rule-based systems uten ML
- Simple automation (RPA uten AI-komponent)
Velge dokumentasjonsformat
Decision tree:
Trenger du auditability for compliance?
├─ Ja → Responsible AI Scorecard (formal, PDF-based)
└─ Nei → Er systemet customer-facing?
├─ Ja → Transparency Note (user-friendly, web-based)
└─ Nei → Er det en pretrained model?
├─ Ja → Model Card (compact, metadata-focused)
└─ Nei → Custom documentation (Markdown, Wiki)
Kombinasjoner:
- Enterprise AI product: Transparency Note + Responsible AI Scorecard + Model Card
- Internal tool: Model Card + lightweight governance doc
- Research prototype: Model Card only
Compliance mapping
EU AI Act requirements:
| EU AI Act krav | Microsoft tool |
|---|---|
| Documentation av intended purpose | Transparency Note: "Capabilities" + "Evaluating and integrating" |
| Description of system architecture | Transparency Note: "The basics of [system]" |
| Risk assessment | Responsible AI Scorecard: Error analysis, fairness assessment |
| Human oversight measures | Transparency Note: "System performance" (review interventions) |
| Accuracy metrics | Responsible AI Scorecard: Quantitative analyses |
| Data governance | Datasheet + Azure Purview lineage tracking |
Sector-specific (Norge):
- Finanstilsynet (finans): Scorecard for fairness metrics i kredittscoring
- Helsedirektoratet (helse): Transparency Note for diagnostiske AI-systemer
- Datatilsynet (GDPR): Privacy impact assessment (PIA) + Transparency Note
Confidence: Verified (Baseline + MCP-inferred)
Integrasjon med Microsoft-stakken
Azure Machine Learning
Built-in transparency tools:
| Feature | Funksjon |
|---|---|
| Responsible AI dashboard | Suite av 7 tools (fairness, explainability, error analysis, etc.) |
| Responsible AI scorecard | PDF export av dashboard-insights |
| Model interpretability | Global/local feature explanations, counterfactual what-if |
| Fairness assessment | Disparate impact metrics across sensitive groups |
| Model catalog | Curated models med pre-built model cards |
Workflow:
- Train model i Azure ML
- Generate Responsible AI dashboard i Studio
- Analyze cohorts (gender, age, etc.)
- Export Responsible AI scorecard
- Archive scorecard i Run History
- Share med stakeholders via link/download
Code example (Python SDK):
from azure.ai.ml import MLClient
from azure.ai.ml.entities import Model
# Register model med model card metadata
model = Model(
name="credit-scoring-model",
version="1.0",
description="XGBoost model for credit scoring",
tags={
"intended_use": "consumer loans",
"training_data": "anonymized-credit-bureau-2025",
"fairness_evaluated": "True"
}
)
ml_client.models.create_or_update(model)
# Generate Responsible AI dashboard
from responsibleai import RAIInsights
rai_insights = RAIInsights(
model=model,
test_data=test_df,
target_column="loan_approved",
task_type="classification",
categorical_features=["gender", "ethnicity"]
)
rai_insights.explainer.add()
rai_insights.fairness.add(sensitive_features=["gender", "ethnicity"])
rai_insights.error_analysis.add()
rai_insights.compute()
# Export scorecard
rai_insights.save("rai_scorecard.pdf")
Confidence: Verified (MCP: microsoft-learn code samples)
Azure OpenAI Service
Transparency mechanisms:
| Mechanism | Implementasjon |
|---|---|
| Transparency Notes | Per-model transparency notes (GPT-4, DALL-E 3, Whisper, o1, etc.) |
| System Card references | Links til OpenAI system cards (GPT-4, o1, Deep Research) |
| Content Safety labels | API response inkluderer content filter scores (hate, violence, sexual, self-harm) |
| Abuse monitoring | Automated detection av misuse (disclosed i data privacy policy) |
| Zero data retention | Customer prompts/completions ikke lagret (disclosed publicly) |
User disclosure:
- Azure OpenAI API inkluderer
modelfield i response → apps kan vise "Powered by GPT-4o" - Content filter annotations → apps kan forklare hvorfor content ble blocked
Transparency Note URL: https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/transparency-note
Azure AI Foundry
Documentation features:
| Feature | Funksjon |
|---|---|
| Model catalog | 1500+ pretrained models med model cards |
| Evaluation tools | Safety metrics (hallucination, bias) pre-deployment |
| Transparency Notes | Integrated documentation for Foundry services |
| Tracing | Observability for agent actions (governance logs) |
| Compliance integrations | Export til Microsoft Purview for data governance |
Agent transparency:
- Trace agent actions (tool calls, data access, decisions)
- Log reasoning steps for auditability
- Disclosure widgets: "This chatbot uses AI" embeddable component
Microsoft Copilot Studio
Built-in disclosures:
| Component | Disclosure |
|---|---|
| Chat interface | "Powered by AI" badge i chat window |
| Generative answers | Attribution links til source documents |
| Plugin actions | Confirmation prompts før sensitive actions (send email, delete file) |
| Data usage | Privacy statement link i bot settings |
Customization:
- Copilot Studio generative AI toolkit: Pre-built "AI disclosure" topic
- Adaptive cards: Template for transparency notices
Responsible AI FAQ: https://learn.microsoft.com/en-us/microsoft-copilot-studio/responsible-ai-overview
Microsoft Purview
Data governance for AI:
| Feature | AI transparency use case |
|---|---|
| Data lineage | Trace hvilke datasets ble brukt til training |
| Sensitivity labels | Classify PII/sensitive data i training sets |
| Audit logs | Track data access for compliance reporting |
| Data catalog | Metadata om datasets (ekvivalent til datasheet) |
Integration med Azure ML:
- Auto-tag datasets med sensitivity labels
- Lineage graph: Dataset → Training job → Model → Deployment
Offentlig sektor (Norge)
Regulatory landscape
Norske krav:
| Regulering | Transparency-krav |
|---|---|
| Personopplysningsloven (GDPR) | Informasjon om automated decision-making (art. 13-14), right to explanation (art. 22) |
| Offentleglova | Disclosure av AI-bruk i offentlige tjenester (med unntak for sikkerhet) |
| Digitaliseringsdirektoratets veileder | Anbefaling om "AI-merking" i brukergrensesnitt |
| EU AI Act (framtidig) | Transparency obligations for high-risk AI systems |
Spesifikke tilpasninger:
For NAV (trygd/sosialtjenester):
- Obligatorisk: Transparency Note + Responsible AI Scorecard for automated decision systems
- Bruker-disclosure: "Vedtaket er basert på automatisk saksbehandling" i varsel
- Right to explanation: Provide counterfactual explanations ("du ville fått godkjent hvis...")
For Helsevesenet:
- Transparency Note må inkludere clinical validation results
- Model Card skal inneholde FDA/CE-marking-ekvivalent info (intended use, contraindications)
- Incident reporting: Adverse events må dokumenteres og rapporteres til Helsedirektoratet
For Kommunale tjenester (barnehageplass, skoleinntak):
- Lightweight transparency: Simplified transparency note for lavrisiko-systemer
- Public consultation: Draft transparency notes publiseres for comment-periode
Språkkrav
Norsk lovkrav:
- Bruker-facing disclosure: Må være på norsk (bokmål/nynorsk)
- Technical documentation: Kan være på engelsk hvis målgruppen er utviklere
- Regulatory submissions: Datatilsynet/Helsedirektoratet aksepterer engelsk technical docs, men executive summary må være norsk
Microsoft-støtte:
- Transparency Notes: Engelsk-only (men kan oversettes av kunde)
- Azure Portal: UI på norsk, men model cards er engelsk
- Responsible AI Scorecard: Støtter ikke norsk i preview (manual translation nødvendig)
Procurement requirements
Anbud for offentlige AI-systemer:
Typisk krav i kravspesifikasjon:
- "Leverandøren skal levere en Transparency Note som dokumenterer AI-systemets funksjon, begrensninger og sikkerhetstiltak."
- "Modellen skal ha en Model Card som beskriver training data, intended use og kjente biases."
- "Løsningen skal ha innebygd disclosure-mekanisme for sluttbrukere (norsk språk)."
Microsoft compliance:
- Azure OpenAI: ✅ Transparency Notes tilgjengelig
- Azure ML: ✅ Responsible AI Scorecard kan genereres
- Custom solutions: ⚠️ Kunde ansvarlig for å generere documentation
Kostnad og lisensiering
Azure Machine Learning
Responsible AI dashboard:
- Kostnad: Inkludert i Azure ML compute cost (ingen ekstra lisens)
- Pricing model: Pay-per-compute (Standard_DS3_v2: ~$0.27/hour)
- Estimat: Generate scorecard for medium model (~10k samples): $2-5 per run
Responsible AI Scorecard:
- Kostnad: Gratis (preview feature)
- Storage: PDF lagres i Azure ML storage (~1-5 MB per scorecard)
- Retention: Ingress til Run History: Gratis for 90 dager, deretter standard storage pricing (~$0.02/GB/month)
Azure OpenAI
Transparency Notes:
- Kostnad: Gratis (public documentation)
- Content Safety annotations: Inkludert i API pricing (ingen ekstra cost)
Custom Transparency Notes:
- Hvis kunde må generere egen Transparency Note for custom fine-tuned model: Konsulentarbeid (estimat: 20-40 timer = NOK 40 000-80 000 ved NOK 2000/time)
Tooling for documentation
Anbefalte verktøy:
| Tool | Bruk | Kostnad |
|---|---|---|
| Markdown editors (VS Code, Typora) | Skrive Transparency Notes | Gratis |
| Model Card Toolkit (open source) | Generate model cards programmatically | Gratis |
| Azure ML SDK | Generate Responsible AI Scorecard | Inkludert i Azure ML |
| Microsoft Word/PowerPoint | Export scorecard til corporate template | Microsoft 365 lisens |
Governance overhead
Time investment (estimat per AI system):
| Aktivitet | Tid (første gang) | Tid (vedlikehold) |
|---|---|---|
| Transparency Note (initial draft) | 20-40 timer | 4-8 timer per major update |
| Model Card | 4-8 timer | 1-2 timer per retrain |
| Responsible AI Scorecard | 2-4 timer (generate + review) | 1 time per iteration |
| User disclosure design | 8-16 timer (UX design) | Minimal (templates reusable) |
Tip: Bruk templates fra Microsoft Responsible AI Standard for å redusere initial draft-tid med 50%.
For arkitekten (Cosmo)
Vurderingskriterier ved transparency-design
Spørsmål til kunden:
-
Hvem er målgruppen for transparency?
- End users → Layered disclosure (in-app + FAQ)
- Regulators → Formal Transparency Note + Scorecard
- Developers → Model Card + API docs
-
Hva er compliance-konteksten?
- EU AI Act → High-risk AI documentation requirements
- GDPR → Right to explanation, automated decision disclosure
- Sector-specific (helse, finans) → Additional certifications
-
Hva er risk-nivået?
- Generative AI → Mandatory Transparency Note
- High-stakes decisions (loan, diagnosis) → Responsible AI Scorecard
- Low-risk automation → Lightweight model card
-
Finnes det eksisterende governance-prosesser?
- Ja → Integrate transparency i existing approval workflows
- Nei → Establish transparency-by-design pipeline
-
Hva er audience's technical literacy?
- Non-technical → Use Responsible AI Scorecard med narrative sections
- Technical → Model Card med detailed metrics
- Mixed → Multi-format (scorecard for execs, model card for devs)
Recommendations by scenario
Scenario 1: Offentlig sektor chatbot (low-stakes)
Transparency approach:
- ✅ Lightweight Transparency Note (1-2 sider)
- ✅ In-app disclosure: "Denne tjenesten bruker AI — svar kan være unøyaktige"
- ✅ FAQ: "Hvordan fungerer chatboten?" med link til Transparency Note
- ❌ Ikke nødvendig: Formal Responsible AI Scorecard (ingen high-risk decision)
Tooling: Azure OpenAI Transparency Note + Copilot Studio disclosure widget
Scenario 2: Kommunal AI for barnehageplass-tildeling (medium-risk)
Transparency approach:
- ✅ Full Transparency Note (inkl. limitations, fairness testing results)
- ✅ Responsible AI Scorecard (for political approval process)
- ✅ Public transparency report: Aggregate statistics (søkere, inntak, appeals)
- ✅ User disclosure: "Vedtaket er basert på automatisk rangering — du kan klage"
Tooling: Azure ML Responsible AI dashboard + custom web-based transparency report
Scenario 3: Helsevesen diagnostisk AI (high-risk)
Transparency approach:
- ✅ Comprehensive Transparency Note (aligned med CE-marking documentation)
- ✅ Responsible AI Scorecard med clinical validation metrics
- ✅ Model Card med performance per patient subgroup (age, comorbidities)
- ✅ Clinician training materials (interpretability guidance)
- ✅ Patient disclosure: "AI assisterer legen — endelig beslutning tas av lege"
Compliance: GDPR, Helseforskningsloven, Medical Device Regulation (MDR)
Tooling: Azure ML + custom clinical validation dashboard
Red flags (når transparency er insufficient)
Warningssignaler:
- ❌ "Vi dokumenterer etter deployment" → Doc debt risk
- ❌ "Model Card er nok for high-risk system" → Compliance gap
- ❌ "Vi bruker generic template uten customization" → Ineffective disclosure
- ❌ "Transparency Note er ikke oppdatert siden launch" → Living documentation failure
- ❌ "End users vet ikke at de interagerer med AI" → User disclosure missing
Intervention:
- Implement transparency checkpoints i deployment pipeline
- Conduct compliance gap analysis (EU AI Act, GDPR)
- Establish documentation versioning og update triggers
Arkitekturvalg for transparency tooling
Decision matrix:
| Behov | Løsning | Rationale |
|---|---|---|
| Formal compliance (audit-ready) | Azure ML Responsible AI Scorecard | PDF archive, versioning, metrics |
| User-facing disclosure | Custom web page + Azure OpenAI annotations | Layered disclosure, UX control |
| Developer documentation | Model Card i Azure ML catalog | Standardized metadata, search |
| Public reporting | Power BI dashboard + annual transparency report | Aggregate stats, trend visualization |
| Incident transparency | Azure Monitor + custom incident log | Real-time alerts, postmortem docs |
Conversation starters
Når kunde sier: "Vi trenger compliance med EU AI Act"
Cosmo: "EU AI Act krever transparency documentation for high-risk systemer. La oss starte med:
- Klassifisere systemet (Annex III risk categories)
- Velge documentation format — anbefaler Transparency Note + Responsible AI Scorecard
- Map compliance requirements til Microsoft tools
- Establish living documentation workflow (updates ved retrain/incidents)
Har dere identifisert hvilken Annex III-kategori systemet faller under?"
Når kunde sier: "Brukerne må forstå hvorfor AI tok en beslutning"
Cosmo: "Dette handler om både interpretability og disclosure. To approaches:
- Technical interpretability: Azure ML model explanations (feature importance, counterfactuals) — for power users/appeals
- User-facing explanations: Simplified narratives i UI ("avslått fordi inntekt < terskel") — for alle brukere
Hva er målgruppen? Trenger de technical details eller intuitive forklaringer?"
Når kunde sier: "Transparency er for dyrt"
Cosmo: "Transparency har upfront cost, men preventerer costlier incidents senere. Breakdown:
- Compliance cost: Bøter for EU AI Act non-compliance: Opptil 6% av global omsetning
- Incident cost: Reputational damage ved non-disclosed AI failure: Unmålbar
- Tooling cost: Azure ML Responsible AI dashboard: ~NOK 20-50 per scorecard
Return on investment: Transparency er billigere enn cleanup. Skal vi prioritere minimum viable transparency (model card + lightweight disclosure) for å starte?"
Kilder og verifisering
Verified sources (MCP: microsoft-learn):
-
Transparency note for Azure OpenAI https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/transparency-note (Status: Verified 2026-02 — Latest updates: o3/o4-mini, Deep Research system cards)
-
Transparency note for Azure AI Search https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/search/transparency-note (Status: Verified 2026-02 — Recommendations for A/B testing, bias detection)
-
Transparency note for Document Intelligence https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/document-intelligence/transparency-note (Status: Verified 2026-02 — Limitations for prebuilt/custom models)
-
Responsible AI scorecard documentation https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai-scorecard (Status: Verified 2026-02 — Public preview, multi-stakeholder alignment use case)
-
Responsible AI dashboard documentation https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai-dashboard (Status: Verified 2026-02 — 7 components: fairness, explainability, error analysis, etc.)
-
What is Responsible AI? https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai (Status: Verified 2026-02 — Six principles: fairness, reliability, privacy, inclusiveness, transparency, accountability)
-
Microsoft Responsible AI Standard v2 https://blogs.microsoft.com/wp-content/uploads/prod/sites/5/2022/06/Microsoft-Responsible-AI-Standard-v2-General-Requirements-3.pdf (Status: Baseline — Impact Assessment framework, June 2022)
-
ISO/IEC 42001:2023 overview (Verified MCP 2026-04) https://learn.microsoft.com/en-us/compliance/regulatory/offering-iso-42001 Microsoft-sertifisering dekker nå: M365 Copilot, Copilot Studio, Microsoft Foundry, Security Copilot, GitHub Copilot og Dragon Copilot (utvidet fra kun M365 Copilot). (Status: Verified 2026-02 — AI management system standard)
-
Govern AI (Cloud Adoption Framework) https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/ai/govern (Status: Verified 2026-02 — AI governance policy examples, documentation requirements)
-
Establishing responsible AI policies (Cloud Adoption Framework) https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ai-agents/responsible-ai-across-organization (Status: Verified 2026-02 — Cross-functional governance, auditing, transparency mechanisms)
Baseline sources (model knowledge + MCP-inferred):
-
Model Cards for Model Reporting (Mitchell et al., 2019) https://arxiv.org/abs/1810.03993 (Academic origin of model card concept)
-
Datasheets for Datasets (Gebru et al., 2018) https://arxiv.org/abs/1803.09010 (Academic origin of datasheet concept)
-
EU AI Act https://artificialintelligenceact.eu/ (Status: Adopted 2024 — Transparency obligations for high-risk AI)
-
NIST AI Risk Management Framework https://www.nist.gov/itl/ai-risk-management-framework (US standard for AI governance)
-
Developing Responsible Generative AI Applications (Windows) https://learn.microsoft.com/en-us/windows/ai/rai (Status: Verified 2026-02 — Model Cards reference, red teaming, governance processes)
Total MCP calls: 5 (microsoft_docs_search: 3, microsoft_docs_fetch: 2, microsoft_code_sample_search: 1) Unique sources: 15 URLs Confidence: 80% Verified (MCP), 20% Baseline (established frameworks)
For Cosmo: Denne kunnskapsbasen dekker både teknisk implementasjon (Azure ML dashboard, Azure OpenAI annotations) og organisatorisk praksis (governance workflows, compliance mapping). Bruk decision trees og scenario-spesifikke recommendations for å guide kunder gjennom transparency-design. Vekt living documentation-prinsippet — transparency er ikke en one-time artifact, men en ongoing practice.