Control · C-090 · Monitoring, Assurance & Incidents

Feedback and complaints channel for AI

Users and affected people can report a problem with an AI system easily, and reports are triaged, linked to the system concerned and analysed for patterns.

Control type
Detective
Risks addressed
7
Audience
Heads-of · Practitioner
Frameworks
Article 72 · PRIN 2A.9 · GOVERN 5 · MEASURE 4
Lifecycle stage
Reviewed
2026-11-11

What it does

It gives the organisation the evidence only people can provide. Users, staff and those affected by a system have a simple way to say that an output was wrong, offensive or harmful. Each report is tagged to the system and version, assessed, and passed to someone who can act. Reports are also analysed together, because a model repeats its faults. The system owner is accountable for acting; the complaints function runs the process. It operates throughout the system's use.

How to implement it

  • Put a visible way to report in the interface, at the point of use.
  • Provide a route for people affected who are not users.
  • Tag complaints that involve an AI system, in the general complaints process as well.
  • Triage by severity, and send serious reports into incident response.
  • Analyse reports in aggregate for repeated faults and affected groups.
  • Tell the reporter what was done, and add confirmed faults to the test suite.

Evidence it operates

Design: a feedback mechanism in each system; tagging rules in complaints handling. Operation: report volumes and categories; triage and response times; pattern analysis; changes made as a result; reports that became incidents.

Where it fits

In operation, alongside technical monitoring. It supports AI monitoring and alerting gap and post-market monitoring gap by catching what measurement misses, and supplies evidence to customer outcome monitoring and the post-market monitoring plan.

Limits

Most people who meet a faulty output do not report it, and those harmed by a decision often do not know an AI system was involved. Reports are skewed towards articulate users. A channel that produces no visible response stops being used. Frontline staff have to recognise an AI-related complaint for the tagging to work.

Risks this mitigates

Supporting mappings

AI monitoring and alerting gap High
Adds what users and affected people report. A system's behaviour in production is not measured against thresholds that trigger action, so degradation, misuse and harm are noticed late or by accident.
Defamation by AI output High
Gives a route to report and remove a defamatory statement. A system publishes a false statement about an identifiable person or organisation that damages their reputation.
Harmful content generation High
Lets users report what got through. A system produces toxic, violent, hateful, sexual or otherwise harmful content, and that content reaches users or is published in the organisation's name.
Inaccurate personal data in outputs High
Lets the person affected report the error. A generative model states false information about an identifiable person as though it were fact.
Poor customer outcomes from AI-driven journeys High
Complaints and reports reveal harm the metrics miss. An AI-driven customer journey causes foreseeable harm to retail customers, or fails to support their understanding and needs, and outcome monitoring does not detect it.
Post-market monitoring gap Medium
Supplies evidence from users and affected people. No plan exists to collect and act on evidence of how a system performs and what effects it has after release.
Stereotyping and demeaning outputs Medium
Lets users report offensive output. Generated text or images reproduce stereotypes about groups, or portray them in demeaning ways.

Framework and clause references

FrameworkClauseTitle
EU AI ActArticle 72Post-market monitoring Evidence from use.
FCA Consumer Duty (PRIN 2A)PRIN 2A.9Monitoring of consumer outcomes Complaints as outcome data.
NIST AI Risk Management Framework (AI RMF 1.0)GOVERN 5Engagement with relevant AI actors Involvement of those affected by the system.
NIST AI Risk Management Framework (AI RMF 1.0)MEASURE 4Feedback on the efficacy of measurement is gathered Feedback gathered.

How to cite

Axiom Verity (2026). Feedback and complaints channel for AI. Reference Library, C-090. https://axiom-verity.com/controls/feedback-and-complaints-channel. Reviewed 2026-11-11.