This is separate from a DPIA. A DPIA covers data protection; a Fundamental Rights Impact Assessment covers broader rights impacts, and only applies to certain deployers (public bodies, banks, insurers, and specific Annex III use cases). Check whether it applies to you before assuming it does.
This documents the oversight you designed. It doesn't prove it happened.
Boundary authorization records seal who approved this system, in what role, so section 5 above becomes provable rather than asserted.
See how boundary authorization worksThis tool produces a preparation draft, not a submission, legal advice, or certification. It follows Article 27 of the EU AI Act as published. Confirm whether the obligation applies to your organization, and the current submission format, with legal counsel.