A score, the reasoning behind it, and suggested interview questions per candidate.
With a hundred CVs per role the first pass is shallow and good people drop out at random. The audit looks at discrimination risk, what the AI Act says about recruitment, and where a human has to decide rather than a score.
AI Agent + human review
Hybrid AI workflow with human review gates is recommended to handle routine screening while preserving human judgment on exceptions and meeting AI Act requirements.
This process is a strong candidate for AI-assisted automation, but regulatory constraints and the need for human judgment on 10-15% of cases make a pure AI agent approach risky. A hybrid workflow that uses AI to score and generate questions for the 85-90% of standard cases, with mandatory human review gates for exceptions and final decisions, will deliver the time savings the client needs while satisfying GDPR, works council requirements, and AI Act compliance. The client has no stated tech stack preference, so the solution can be built on any modern cloud platform with API integration to the HR system once upgraded. This approach reduces routine work while keeping humans accountable for hiring decisions.
The client stated no specific tech stack preference, so the hybrid solution can be implemented on any modern platform (Azure OpenAI, AWS Bedrock, or Google Vertex) with workflow orchestration and API integration to the HR SaaS system.
Process Overview
The HR team receives CVs for open roles throughout the day, typically through email or directly into their HR SaaS system. For each CV, a member of the HR team reviews it against the job ad requirements, looking at skills, experience, qualifications, and overall fit. They then generate a score that reflects how well the candidate matches the role, document their reasoning for that score, and prepare a set of suggested interview questions tailored to the candidate's background and the role's needs. This scored package is then passed to the hiring manager for decision-making. The process runs multiple times daily and handles around 2,600 CVs per year, with each evaluation taking roughly 13 minutes of focused HR time.
The challenge is that the current manual approach leads to inconsistency and burnout. The HR manager and assistant spend over 500 hours per year on routine screening, and when volume spikes they resort to shallow first-pass reviews that sometimes cause strong candidates to be overlooked. Around 10 to 15 percent of CVs do not fit a standard pattern, such as candidates with non-traditional career paths or ambiguous qualifications, and these require more careful judgment. The rest are relatively straightforward comparisons of listed skills and experience against job requirements, work that is repetitive and time-consuming but does not require deep expertise once the criteria are clear.
Path Scores
This path delivers the stated goal of automating routine cases while routing exceptions to humans. It satisfies AI Act requirements for human oversight in high-risk recruitment decisions and addresses works council concerns by keeping humans in the loop. The 85-90% of standard cases can be processed automatically, with clear escalation rules for the 10-15% that need judgment.
Technically feasible and would deliver strong time savings, but creates compliance risk under the AI Act which classifies recruitment AI as high-risk and requires human oversight. Works council consultation would likely push back on fully automated candidate evaluation. The 10-15% exception rate also means pure automation would generate poor outcomes for a significant minority of candidates.
RPA could automate data movement between email, spreadsheets, and the HR system, reducing manual entry errors. However, it cannot perform the core cognitive task of evaluating CV fit against job requirements or generating interview questions. It would only address the data-handling overhead, not the 13 minutes of evaluation time per CV.
An autonomous agent making final hiring decisions without human gates would likely violate AI Act requirements for high-risk use cases and create unacceptable discrimination risk. The client explicitly mentioned audit concerns about discrimination and the need for human decision-making. This approach is technically possible but legally and ethically problematic for recruitment.
Building a rule-based CV screening engine from scratch would require extensive development effort to encode hiring criteria, parse CVs, and generate questions. With IT being one person who also does support, the team lacks capacity to build and maintain this. The variability in CVs and job requirements makes hard-coded rules brittle and high-maintenance.
The current manual process consumes 563 hours per year and causes good candidates to drop out randomly due to shallow first-pass review. The client explicitly stated this is the problem they want to solve. Keeping the status quo fails to address the core issue and wastes skilled HR time on repetitive screening.
Process Dimensions
Eight dimensions drive the recommendation, scored 0–10 with a note on each.
CVs and job ads are semi-structured documents with predictable sections but variable formats, well-suited to modern LLM parsing and comparison.
Core matching criteria are clear (skills, experience, qualifications) but 10-15% of cases require human judgment on ambiguous fit, indicating rules are mostly clear with known gray zones.
Ten to fifteen percent of CVs do not fit standard patterns and require judgment, meaning 85-90% are routine and automatable.
HR system has an API available on a higher tier not currently subscribed, and the process relies on email and spreadsheets, so integration is possible but requires investment.
At 2,600 runs per year and 13 minutes each, the process consumes 563 hours annually, creating strong ROI potential for automation.
Job requirements and hiring criteria evolve over time, but the core screening logic (match skills, experience, qualifications) is stable enough for AI training.
The client explicitly stated that 10-15% of cases need judgment and that audit concerns focus on where a human must decide rather than a score, indicating high need for human oversight.
GDPR, works council consultation, and AI Act requirements for high-risk recruitment AI all demand human accountability and explainability, making compliance a critical constraint.
ROI Estimate
€11,492
Current annual cost
70%
Estimated time saved
€8,044
Annual savings
2mo
Payback period
Current cost is 2,600 runs per year times 13 minutes per run divided by 60, times 25 EUR per hour, totaling 11,492 EUR annually. Hybrid automation should handle 85-90% of routine cases with minimal human time, saving roughly 70% of current effort. Build cost includes HR system upgrade, API integration, AI workflow development, and compliance work. Payback is 2-3 months at the low end, 4-5 months at the high end.
Implementation Roadmap
Engage legal counsel to map AI Act requirements for recruitment AI, document human oversight gates, and prepare works council consultation materials. Establish clear policies on what decisions require human review and how candidate data will be protected under GDPR. This is the foundation for any AI deployment in recruitment.
Upgrade HR SaaS subscription to tier with API access. Build integration layer to pull job ads and CVs, push scores and interview questions back into the HR system. This eliminates the email and spreadsheet gaps and creates a single source of truth.
Develop AI workflow using LLM (GPT-4 or equivalent) to parse CVs, compare against job ad requirements, generate scores with reasoning, and suggest interview questions. Train on historical data and test against known good and bad hires. Establish confidence thresholds that trigger human review.
Build workflow orchestration that routes low-confidence scores, edge cases, and the 10-15% of non-standard CVs to HR staff for review. Create review interface that shows AI reasoning and allows human override. Ensure all final decisions are human-approved.
Run hybrid system in parallel with manual process for one or two open roles. Measure accuracy, time savings, and user satisfaction. Collect feedback from HR team and hiring managers. Refine confidence thresholds and exception rules based on real-world performance.
Deploy to all open roles. Establish monthly audit process to review AI decisions for bias or discrimination patterns. Train HR team on system use and when to override AI recommendations. Document all decisions for AI Act compliance and works council reporting.
Risks & Considerations
The primary risk is compliance failure. The AI Act classifies recruitment AI as high-risk and requires human oversight, transparency, and bias monitoring. If the system is deployed without proper human review gates or documentation, the company faces regulatory penalties and reputational damage. Discrimination risk is real because AI trained on historical hiring data can perpetuate existing biases. Monthly audits of AI decisions by protected characteristics (age, gender, ethnicity) are essential. The works council may resist or slow deployment if they perceive it as replacing human judgment rather than augmenting it, so early consultation and clear communication about human-in-the-loop design are critical. Technical risk is lower but still present because LLMs can hallucinate or misinterpret ambiguous CV language, which is why confidence thresholds and exception routing are non-negotiable. Finally, the one-person IT team may struggle to support the system long-term, so the solution must be built on a stable platform with vendor support and minimal custom code.
Architecture Overview
Hover to zoom · click for fullscreen
Why This Approach
The hybrid approach is the right fit for this process because it addresses both the efficiency problem and the regulatory reality. The client needs to free up HR time spent on routine screening, but they operate in an environment where GDPR, works council oversight, and the AI Act all require human accountability in recruitment decisions. A fully automated AI workflow or autonomous agent would deliver stronger time savings on paper, but it would create unacceptable compliance and discrimination risk. The AI Act explicitly classifies recruitment AI as high-risk and mandates human oversight. The works council consultation mentioned in the process record signals that this organization takes employee and candidate rights seriously, and pushing through a black-box AI solution would likely face internal resistance and external scrutiny.
The hybrid path threads this needle by using AI to handle the 85 to 90 percent of CVs that follow standard patterns, where the matching logic is clear and the risk of error is low, while routing the 10 to 15 percent of edge cases and any low-confidence scores to human review. This design keeps the HR team in control of final decisions and satisfies the regulatory requirement for human oversight, while still automating the bulk of repetitive work. The AI generates a score, explains its reasoning, and suggests interview questions, but a human must review and approve before the output reaches the hiring manager. This is not just a compliance checkbox. It is also good practice because the decision points identified in the assessment, such as how to score ambiguous qualifications or whether exceptions require special handling, genuinely require human judgment that current AI cannot reliably replicate.
The client has no stated technology stack preference, which gives flexibility in implementation. The solution can be built on any major cloud platform with access to a capable LLM, such as GPT-4 on Azure OpenAI, Claude on AWS Bedrock, or Gemini on Google Vertex, paired with workflow orchestration to handle routing and human review gates. The HR system already has an API on a higher subscription tier, so upgrading that tier and building the integration will eliminate the current reliance on email and spreadsheets and create a clean end-to-end flow. The tradeoff here is upfront investment in the HR system upgrade and API integration work, but that investment pays for itself quickly given the 563 hours per year currently spent on manual screening.
The alternative paths fall short for specific reasons. A fully automated AI workflow scores well on efficiency but fails on compliance and the client's explicit concern about audit and discrimination risk. An autonomous AI agent is even riskier and would almost certainly run afoul of AI Act requirements. RPA could move data around but cannot perform the cognitive work of evaluating fit or generating questions, so it only solves a small part of the problem. Building a traditional coded solution would require the one-person IT team to encode and maintain complex hiring rules, which is not realistic given their capacity and the variability of CVs and job requirements. Staying manual fails to address the core issue the client came to solve.
The hybrid approach is honest about what AI can and cannot do in this context. It automates the repetitive comparison work that consumes most of the 13 minutes per CV, but it does not pretend that AI can replace human judgment on edge cases or take legal accountability for hiring decisions. It delivers 70 percent time savings, meets regulatory requirements, and keeps the HR team in control, which is exactly what this client needs.
Comparing the Top Approaches
The top three paths for this process are Hybrid, AI Workflow, and RPA. The Hybrid approach scored highest at 9 because it delivers the core benefit of AI-powered screening while satisfying the legal and ethical constraints that make this decision complicated. The AI Act classifies recruitment systems as high-risk and mandates human oversight of automated decisions. The works council consultation requirement means any solution that removes humans from the hiring loop will face resistance and possibly rejection. The Hybrid path routes 85 to 90 percent of standard CVs through automated AI scoring and question generation, then pushes the 10 to 15 percent of exceptions and all final decisions to human reviewers. This keeps the HR team accountable while eliminating the repetitive work that currently consumes 563 hours per year.
AI Workflow scored 6 and remains viable if the client is willing to accept tighter regulatory scrutiny. A fully automated workflow with no mandatory human gates would save more time and cost less to build, but it creates compliance risk. The AI Act requires explainability and human oversight for high-risk use cases, and a pure automation approach makes it harder to demonstrate that a human made the final hiring decision. The 10 to 15 percent exception rate also means a fully automated system would produce poor outcomes for a meaningful minority of candidates, which undermines the goal of improving hiring quality. If the client can establish that the AI system only provides recommendations and humans always make the final call, this path becomes more attractive, but the legal advice and works council consultation would need to confirm that structure is acceptable.
RPA scored 5 because it solves a different problem. It can move data between email, spreadsheets, and the HR system, which reduces manual entry errors and saves a few minutes per CV. However, it cannot evaluate whether a candidate is a good fit for the role or generate relevant interview questions. The 13 minutes per CV is mostly evaluation time, not data entry time, so RPA would deliver only marginal savings. It makes sense as a tactical fix if the client wants to automate data handling while keeping the evaluation manual, but it does not address the core pain point the client described. The Hybrid path is better because it tackles the evaluation work directly while still preserving human judgment where it matters.
How to Build It
The recommended Hybrid solution is built on an LLM-powered workflow with human review gates and API integration to the HR system. When a new CV arrives for an open role, the system pulls the job ad and CV from the HR platform via API. An LLM such as GPT-4, Claude, or an equivalent model hosted on Azure OpenAI, AWS Bedrock, or Google Vertex parses both documents and extracts key information such as required skills, experience level, qualifications, and candidate background. The LLM then compares the CV against the job ad requirements and generates a fit score with written reasoning that explains why the candidate is strong, marginal, or weak. It also produces three to five suggested interview questions tailored to gaps or strengths in the candidate's profile. This entire process takes seconds and replaces the 13 minutes of manual review.
The workflow engine evaluates the confidence level of the AI output using rules defined during the build phase. If the CV fits a standard pattern, the required skills are clearly present or absent, and the LLM's reasoning is coherent, the system assigns a high confidence score and routes the result directly to the hiring manager for final decision. If the CV has an unusual career path, the qualifications are ambiguous, or the LLM's reasoning contains uncertainty markers, the system flags the case for human review. The HR assistant or manager reviews these exceptions, reads the AI reasoning, and either accepts, modifies, or overrides the score and questions. All final decisions, whether routine or exceptional, are recorded in the HR system with a timestamp and the name of the approving human. This audit trail satisfies GDPR and AI Act documentation requirements.
The integration layer is critical because the current process relies on email and spreadsheets, which create data gaps and manual entry errors. Upgrading the HR SaaS subscription to a tier with API access allows the system to pull CVs and job ads automatically and push scores and interview questions back into the platform where hiring managers already work. This eliminates the need for HR staff to copy and paste between systems or maintain parallel spreadsheets. The workflow orchestration can be built on a low-code platform such as Make, Zapier, or n8n, or on a custom service using Python and a task queue if the client prefers more control. The LLM API calls are stateless and fast, so the system can handle multiple CVs in parallel during high-volume hiring periods.
The pilot phase is essential because this is a high-stakes use case with regulatory and reputational risk. Running the Hybrid system in parallel with the manual process for one or two open roles allows the HR team to compare AI scores and questions against their own judgment and identify cases where the AI misunderstood requirements or missed nuance. This feedback loop refines the confidence thresholds and exception rules before full rollout. Monthly audits after deployment track AI decisions by protected characteristics such as age, gender, and ethnicity to detect bias patterns early. If the data shows that the AI systematically scores certain groups lower, the system can be retrained or the confidence thresholds adjusted to route more cases to human review until the bias is corrected.
Risks in Detail
The biggest risk is compliance failure. The AI Act treats recruitment AI as high-risk and requires human oversight, explainability, and ongoing monitoring for discrimination. If the system is deployed without mandatory human review gates or proper audit trails, the company faces regulatory penalties and reputational damage. This is not a theoretical concern because recruitment AI has already triggered enforcement actions in other jurisdictions when it perpetuated bias. The Hybrid design mitigates this risk by keeping humans accountable for final decisions, but only if the review gates are enforced in practice. If hiring managers start rubber-stamping AI recommendations without reading the reasoning, the system effectively becomes a fully automated decision maker and loses its compliance justification. Training and culture matter as much as technical controls.
Discrimination risk is real because LLMs learn patterns from training data and historical hiring decisions. If the company has historically hired more men than women for certain roles, or favored candidates from certain universities, the AI may pick up and amplify those patterns. Monthly audits by protected characteristics are essential to catch this early. The system should also be designed to strip out or anonymize information that should not influence hiring decisions, such as age, gender markers, or photos, before the AI evaluates the CV. False negatives are another failure mode because the AI may reject strong candidates who do not fit a standard profile, such as career changers or people with non-traditional backgrounds. The 10 to 15 percent exception rate suggests the HR team already encounters these cases, and the Hybrid design routes them to human review, but the confidence thresholds must be tuned carefully to avoid missing good candidates. Finally, the one-person IT team may struggle to support the system long-term, especially if it is built on custom code rather than a stable platform with vendor support. The implementation should prioritize simplicity and leverage managed services wherever possible to reduce the ongoing maintenance burden.
Claude Code Starter
A scaffolded project ready to open in Claude Code. Unzip, open the folder, and Claude starts building immediately.
Claude Code Starter (.zip)
Your own assessment includes a ready-to-use project scaffold: CLAUDE.md, pyproject.toml, src/agent.py and .env.example. Open the folder in Claude Code and it starts building.